80
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enable 802.1X globally.
dot1x
By default, 802.1X is disabled
globally.
3.
Enter Layer 2 Ethernet
interface view.
interface
interface-type
interface-number
N/A
4.
Enable 802.1X on a port.
dot1x
By default, 802.1X is disabled
on a port.
Enabling EAP relay or EAP termination
When configuring EAP relay or EAP termination, consider the following factors:
•
Support of the RADIUS server for EAP packets.
•
Authentication methods supported by the 802.1X client and the RADIUS server.
You can use both EAP termination and EAP relay in any of the following situations:
•
The client is using only MD5-Challenge EAP authentication.
•
The client is using only the username and password EAP authentication initiated by an HP iNode
802.1X client.
To use EAP-TL, PEAP, or any other EAP authentication methods, you must use EAP relay. When you make
your decision, see "
Comparing EAP relay and EAP termination
" for help.
For more information about EAP relay and EAP termination, see "
802.1X authentication procedures
."
To configure EAP relay or EAP termination:
Step Command Remarks
1.
Enter system
view.
system-view
N/A
2.
Configure EAP
relay or EAP
termination.
dot1x
authentication-method
{
chap
|
eap
|
pap
}
By default, the access device performs EAP
termination and uses CHAP to communicate with the
RADIUS server.
Specify the
eap
keyword to enable EAP relay.
Specify the
chap
or
pap
keyword to enable
CHAP-enabled or PAP-enabled EAP termination.
NOTE:
If EAP relay mode is used, the
user-name-format
command configured in RADIUS scheme view does not
take effect. The access device sends the authentication data from the client to the server without any
modification.
