H3C Technologies H3C S7500E Series Switches - Manual (Page 123)

6-2
Currently, EAD fast deployment cannot work with MAC authentication or port security. Once
MAC authentication or port security is enabled globally, the EAD fast deployment is disabled
automatically.
Configuration Prerequisites
z Enable 802.1X globally.
z Enable 802.1X on the specified port, and set the port authorization mode to auto.
Configuration Procedure
Configuring a freely accessible network segment
A freely accessible network segment, also called a free IP, is a network segment that users can
access before passing 802.1X authentication.
Once a free IP is configured, the fast deployment of EAD is enabled.
Follow these steps to configure a freely accessible network segment:
To do… Use the command… Remarks
Enter system view system-view —
Configure a freely accessible
network segment
dot1x free-ip ip-address
{ mask-address | mask-length }
Required
No freely accessible network
segment is configured by
default.
z The free IP feature is mutually exclusive with 802.1X guest VLAN.
z If no freely accessible network segment is configured, a user cannot obtain a dynamic IP
address before passing 802.1X authentication. To solve this problem, you can configure a
freely accessible network segment that is on the same network segment with the DHCP
server.
Configuring the HTTP redirect URL
Follow these steps to configure the HTTP redirect URL:
To do… Use the command… Remarks
Enter system view system-view —