Setting 802.1X Client Version Authentication - Huawei Quidway S3500 Series Operation Manual

Operation Manual - Security
Quidway S3500 Series Ethernet Switches

1.2.10 Setting 802.1x Client Version Authentication

Note:
Among S3500 series ethernet switches, S3552G, S3552P, S3528G, S3528P, S3526E,
S3526E FM, S3526E FS and S3526C support this function, and S3526, S3526 FM and
S3526 FS don't.
After enabling 802.1x client version authentication, the switch authenticates the version
and validity of the 802.1x client of the access user, avoiding the access of the users at
the client with the defectively old version or at the invalid client.
I. Enabling 802.1x client version authentication
Perform the following in system view or Ethernet port view.
Table 1-11 Setting 802.1x client version authentication
Enable
authentication
Disable
authentication
By default, 802.1x client version authentication is disabled on all ports.
In system view, if the interface-list parameter is not specified, it means that to enable
the 802.1x client version authentication feature on all interfaces; if the interface-list
parameter is specified, it means that to enable the feature on the specified interfaces. In
Ethernet port view, the interface-list parameter cannot be specified, and you can use
command only to enable the feature on the current interface.
II. Configuring the maximum retry times for the switch to send version request
frame to the client
After sending client version request frame for the first time, if the switch receives no
response from the client response within a certain period of time (set by the version
authentication timeout timer), it resends version request again. When the switch
receives no response for the configured maximum times, it no longer authenticates the
version of the client, and perform the following authentications.
If configured, this command functions on all ports that enabled version authentication
function.
Perform the following in system view.
Operation
802.1x client version
802.1x client version
Huawei Technologies Proprietary
dot1x version-check
interface-list ]
undo dot1x version-check [ interface
interface-list ]
1-10
Chapter 1 802.1x Configuration
Command
[
interface