Dot1X Authentication-Method - 3Com 5500G-EI Command Reference Manual

dot1x
authentication-method
enabled globally, if the parameters are not configured globally or for a specified
port, they will maintain the default values.
After the global 802.1x performance is enabled, only when port 802.1x
performance is enabled will the configuration of 802.1x become effective on the
port.
Related commands:
display dot1x
Example
To enable 802.1x on GigabitEthernet 1/0/1, enter the following.
<SW5500>system-view
System View: return to User View with Ctrl-Z
[SW5500]dot1x interface gigabitethernet 1/0/1
To enable 802.1x globally, enter the following.
[SW5500]dot1x
Syntax
dot1x authentication-method { chap | pap | eap md5-challenge }
undo dot1x authentication-method
View
System View
Parameter
Use CHAP authentication method.
Chap:
Use PAP authentication method.
Pap:
Use EAP authentication method. At present, only
eap:
available
Description
Use the

dot1x authentication-method

authentication method for the 802.1x user. Use the
authentication-method
of the 802.1x user.
By default, CHAP authentication is used for 802.1x user authentication.
Password Authentication Protocol (PAP) is a kind of authentication protocol with
two handshakes. It sends the password in the form of simple text.
Challenge Handshake Authentication Protocol (CHAP) is a kind of authentication
protocol with three handshakes. It only transmits the username, not the password.
CHAP is more secure and reliable.
In the process of EAP authentication, the Switch directly sends authentication
information of an 802.1x user to a RADIUS server in the form of anEAP packet. It is
802.1x Configuration Commands
.
command to configure the
command to restore the default authentication method
encryption method is
md5
undo dot1x
345