Operation Manual – 802.1x-HABP-MAC Authentication
H3C S3610&S5510 Series Ethernet Switches
Chapter 2 EAD Fast Deployment Configuration
2-2
2.2.2 Configuration Procedure
I. Configuring a freely accessible network segment
A freely accessible network segment, also called a free IP, is a network segment that
users can access before passing 802.1x authentication.
Once a free IP is configured, the fast deployment of EAD is enabled.
Follow these steps to configure a freely accessible network segment:
To do…
Use the command…
Remarks
Enter system view
system-view
—
Configure a freely
accessible network
segment
dot1x free-ip ip-address
{
mask-address
|
mask-length
}
Required
No freely accessible
network segment is
configured by default.
Note:
z
Currently, MAC authentication and port security cannot work together with EAD fast
deployment. Once MAC authentication or port security is enabled globally, the EAD
fast deployment is disabled automatically.
z
If no freely accessible network segment is configured, a user cannot obtain a
dynamic IP address before passing 802.1x authentication. To solve this problem,
you can configure a freely accessible network segment that is on the same network
segment with the DHCP server.
II. Configuring the IE redirect URL
Follow these steps to configure the IE redirect URL:
To do…
Use the command…
Remarks
Enter system view
system-view
—
Configure the IE redirect
URL
dot1x url url-string
Required
No redirect URL is
configured by default.
Note:
The redirect URL and the freely accessible network segment must belong to the same
network segment. Otherwise, the specified URL is unaccessible.