Huawei Quidway S3100 Series, Руководство по эксплуатации

Страница: 219 / 514

Operation Manual – 802.1x
Quidway S3100 Series Ethernet Switches
Chapter 1 802.1x Configuration
Huawei Technologies Proprietary
1-17
1.5.1 Prerequisites
Configuration of basic 802.1x
1.5.2 Configuring Proxy Checking
This function needs the support of 802.1x client program and CAMS, as listed below.
z
The 802.1x clients must be able to check whether multiple network cards, proxy
servers, or IE proxy servers are used on the user devices.
z
On CAMS, enable the function that forbids clients from using multiple network
cards, a proxy server, or an IE proxy.
By default, the use of multiple network cards, proxy server, and IE proxy are allowed on
802.1x client. If you specify CAMS to disable use of multiple network cards, proxy
server, and IE proxy, CAMS sends messages to 802.1x client to request the latter to
disable the use of multiple network cards, proxy server, and IE proxy when a user
passes the authentication.
Table 1-3 Configure user proxy checking
Operation Command Description
Enter system view system-view —
Enable user checking
and control for users
logging in through
proxies dot1x
supp-proxy-check
{ logoff | trap }
[ interface interface-list ]
Optional
Note:
z
The proxy checking function needs the support of Huawei's 802.1x client program.
z
The configuration listed in Table 1-3 takes effect only when it is performed on CAMS
as well as on the switch and the client version checking function is enabled on the
switch (by the dot1x version-check command).