Enabling 802.1x, Enabling eap relay or eap termination – H3C Technologies H3C S12500-X Series Switches User Manual
Page 83
![background image](https://www.manualsdir.com/files/812698/content/doc083.png)
71
Tasks at a glance
(Optional.)
772H
Configuring the quiet timer
(Optional.)
773H
Enabling the periodic online user re-authentication function
38B
Enabling 802.1X
When you enable 802.1X, do not enable 802.1X on a port that is in a link aggregation or service
loopback group.
To enable 802.1X:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enable 802.1X globally.
dot1x
By default, 802.1X is disabled
globally.
3.
Enter Ethernet interface
view.
interface interface-type interface-number
N/A
4.
Enable 802.1X on a port. dot1x
By default, 802.1X is disabled
on a port.
39B
Enabling EAP relay or EAP termination
When configuring EAP relay or EAP termination, consider the following factors:
•
Support of the RADIUS server for EAP packets
•
Authentication methods supported by the 802.1X client and the RADIUS server
If the client is using only MD5-Challenge EAP authentication or the "username + password" EAP
authentication initiated by an H3C iNode 802.1X client, you can use both EAP termination and EAP relay.
To use EAP-TL, PEAP, or any other EAP authentication methods, you must use EAP relay. When you make
your decision, see "
774H
Comparing EAP relay and EAP termination
" for help.
For more information about EAP relay and EAP termination, see "
775H
802.1X authentication procedures
."
To configure EAP relay or EAP termination:
Step Command Remarks
1.
Enter system
view.
system-view
N/A
2.
Configure EAP
relay or EAP
termination.
dot1x authentication-method
{ chap | eap | pap }
By default, the network access device performs EAP
termination and uses CHAP to communicate with the
RADIUS server.
Specify the eap keyword to enable EAP termination.
Specify the chap or pap keyword to enable
CHAP-enabled or PAP-enabled EAP relay.
- H3C S5560 Series Switches H3C WX6000 Series Access Controllers H3C WX5000 Series Access Controllers H3C WX3000 Series Unified Switches H3C LSWM1WCM10 Access Controller Module H3C LSWM1WCM20 Access Controller Module H3C LSQM1WCMB0 Access Controller Module H3C LSRM1WCM2A1 Access Controller Module H3C LSBM1WCM2A0 Access Controller Module H3C S9800 Series Switches H3C S5130 Series Switches H3C S5120 Series Switches