Command Manual – 802.1x
Quidway S3900 Series Ethernet Switches-Release 1510
Chapter 1 802.1x Configuration Commands
Huawei Technologies Proprietary
1-7
Use the
undo dot1x authentication-method
command to revert to the default 802.1x
authentication method.
The default 802.1x authentication method is CHAP.
PAP applies a two-way handshaking procedure. In this method, passwords are
transmitted in plain text.
CHAP applies a three-way handshaking procedure. In this method, user names are
transmitted rather than passwords. Therefore this method is safer.
In an EAP authentication method, a switch sends 802.1x authentication information
directly to the RADIUS server in EAP packets, instead of having to convert them into
RADIUS packets before forwarding to the RADIUS server. EAP authentication can be
realized in one of the four sub-methods: PEAP, EAP-TLS, EAP-TTLS and EAP-MD5.
Related command:
display dot1x
.
Note:
When the device itself functions as the authentication server, the 802.1X authentication
method cannot be configured to EAP.
Example
# Specify the authentication method to be PAP.
<Quidway> system-view
System View: return to User View with Ctrl+Z.
[Quidway] dot1x authentication-method pap
1.1.4 dot1x dhcp-launch
Syntax
dot1x dhcp-launch
undo dot1x dhcp-launch
View
System view
Parameter
None