H3C S5500-SI Series, Руководство по эксплуатации

Страница: 621 / 1217

1-2
Figure 1-1 Network diagram for HABP application
Internet
Switch B Switch C
Authenticator
Supplicant
Switch A
Supplicant Supplicant
Switch D Switch E
Authentication
server
HABP is a link layer protocol that works above the MAC layer. It is built on the client-server model.
Generally, the HABP server is assumed by the management device (such as Switch A in the above
example), and the attached switches function as the HABP clients, such as Switch B through Switch E
in the example. No device can function as both an HABP server and a client at the same time. Typically,
the HABP server sends HABP requests to all its clients periodically to collect their MAC addresses, and
the clients respond to the requests. After the server learns the MAC addresses of all the clients, it
registers the MAC addresses as HABP entries. Then, link layer frames exchanged between the clients
can bypass the 802.1X authentication on ports of the server without affecting the normal operation of
the whole network. All HABP packets must travel in a VLAN, which is called the management VLAN.
Communication between the HABP server and the HABP clients is implemented through the
management VLAN.
Configuring HABP
Complete the following tasks to configure HABP:
z
Configuring the HABP Server
z
Configuring an HABP Client
Configuring the HABP Server
With the HABP server function enabled, the administrative device starts to send HABP requests to the
attached switches. The HABP responses include the MAC addresses of the attached switches. This
makes it possible for the administrative device to manage the attached switches.
You can configure the interval of sending HABP requests on the administrative device.
Follow these steps to configure an HABP server:
To do… Use the command… Remarks
Enter system view system-view —
Enable HABP habp enable
Optional
Enabled by default