Huawei Quidway S3000-EI Series, Руководство по эксплуатации

Страница: 215 / 392

Operation Manual - Security
Quidway S3000-EI Series Ethernet Switches
Chapter 1 802.1x Configuration
Huawei Technologies Proprietary
1-6
1.2.5 Setting the Supplicant Number on a Port
The following commands are used for setting number of users allowed by 802.1x on
specified port. When no port is specified, all the ports accept the same number of
supplicants.
Perform the following configurations in system view or Ethernet port view.
Table 1-5
Setting the maximum number of users via a specified port
Operation Command
Set maximum number of users via
specified port
dot1x max-user user-number
[
interface interface-list
]
Restore the maximum number of users
on the port to the default value
undo dot1x max-user
[
interface
interface-list
]
By default, 802.1x allows up to 256 supplicants on each port for S3000-EI Series
Ethernet switches.
1.2.6 Setting the Authentication in DHCP Environment
If in DHCP environment the users configure static IP addresses, you can set 802.1x to
disable the switch to trigger the user ID authentication over them with the following
command.
Perform the following configurations in system view.
Table 1-6
Setting the Authentication in DHCP Environment
Operation Command
Disable the switch to trigger the user ID
authentication over the users who configure
static IP addresses in DHCP environment
dot1x dhcp-launch
Enable the switch to trigger the authentication
over them
undo dot1x dhcp-launch
By default, the switch can trigger the user ID authentication over the users who
configure static IP addresses in DHCP environment.
1.2.7 Configuring the Authentication Method for 802.1x User
The following commands can be used to configure the authentication method for
802.1x user. Three kinds of methods are available: PAP authentication (RADIUS server
must support PAP authentication), CHAP authentication (RADIUS server must support
CHAP authentication), EAP relay authentication (switch send authentication