H3C Technologies H3C S3100 Series Switches - Manual (Page 285)

Operation Manual – 802.1x
H3C S3100-52P Ethernet Switch Chapter 1 802.1x Configuration
1-12
This function makes the switch to send version-requesting packets again if the 802.1x
client fails to send version-reply packet to the switch when the version-checking timer
times out.
Note:
z
The 802.1x client version-checking function needs the support of H3C’s 802.1x
client program.
III. The Guest VLAN function
The Guest VLAN function enables supplicant systems that that are not authenticated to
access network resources in a restrained way.
The Guest VLAN function enables supplicant systems that do not have 802.1x client
installed to access specific network resources. It also enables supplicant systems that
are not authenticated to upgrade their 802.1x client programs.
With this function enabled:
z
The switch multicasts trigger packets through all the 802.1x-enabled ports.
z
After the maximum number retries have been made and there are still ports that
have not sent any response back, the switch will then add these ports to the Guest
VLAN.
z
Users belonging to the Guest VLAN can access the resources of the Guest VLAN
without being authenticated. But they need to be authenticated when accessing
external resources.
Normally, the Guest VLAN function is coupled with the dynamic VLAN delivery function.
Refer to AAA&RADIUS&RADIUS&HWTACACS&EAD Operation Manual for detailed
information about the dynamic VLAN delivery function.
1.2 802.1x Configuration
802.1x provides a solution for authenticating users. To implement this solution, you
need to execute 802.1x-related commands. You also need to configure AAA schemes
on switches and specify the authentication scheme (RADIUS authentication scheme or
local authentication scheme).
ISP domain
configurati on
AAA sc he
Local
authenticati on
me
RADIUS
scheme
802.1x
configurati on
ISP domain
configurati on
AAA sc he
Local
authenticati on
me
RADIUS
scheme
802.1x
configurati on
Figure 1-10
802.1x configuration