beautypg.com

H3C Technologies H3C WX3000E Series Wireless Switches User Manual

Page 131

background image

117

Step Command

Remarks

2.

Configure EAP relay or EAP
termination.

dot1x authentication-method
{ chap | eap | pap }

Optional.
By default, the network access

device performs EAP termination
and uses CHAP to communicate

with the RADIUS server.
Specify the eap keyword to enable

EAP termination.
Specify the chap or pap keyword
to enable CHAP-enabled or

PAP-enabled EAP relay.

NOTE:

If EAP relay mode is used, the user-name-format command configured in RADIUS scheme view does not
take effect. The access device sends the authentication data from the client to the server without any
modification. For more information about the user-name-format command, see

Security Command

Reference.

Setting the maximum number of concurrent 802.1X

users on a port

You can set the maximum number of concurrent 802.1X users for ports individually in interface view or in

bulk in system view. If different settings are configured for a port in both views, the setting configured later
takes effect.
To set the maximum number of concurrent 802.1X users on a port:

Step Command

Remarks

1.

Enter system view.

system-view

N/A

2.

Set the maximum number of
concurrent 802.1X users on a

port.

(Approach 1) In system view:

dot1x max-user user-number
[ interface interface-list ]

(Approach 2) In Layer 2

Ethernet or WLAN-ESS
interface view:

a.

interface interface-type
interface-number

b.

dot1x max-user
user-number [ interface

interface-list ]

Use either approach.
The default depends on the device
model. For more information, see

About the WX Series Access

Controllers Command References.

Setting the maximum number of authentication

request attempts

The network access device retransmits an authentication request if it receives no response to the request

it has sent to the client within a period of time (specified by using the dot1x timer tx-period