Optional) Enabling Direct Authentication - Huawei Quidway S9300 Configuration Manual

2 NAC Configuration
----End

2.5.4 (Optional) Enabling Direct Authentication

Context
After direct authentication is enabled, users who connect to the network through this interface
pass the authentication directly.
If direct authentication is enabled on an interface, 802.1x authentication and MAC address
authentication cannot be enabled on the interface. If 802.1x authentication or MAC address
authentication is enabled on the interface, direct authentication cannot be enabled on the
interface.
You can enable direct authentication in the following ways.
Procedure
Step 1 In the system view:
1.
2.
Step 2 In the interface view:
1.
2.
3.
2-24
You must ensure that no online user exists before disabling MAC address authentication
by the undo mac-authen command.
CAUTION
Run:
system-view
The system view is displayed.
Run:
direct-authen interface { interface-type interface-number1 [ to interface-
number2 ] } &<1-10>
Direct authentication is enabled on interfaces.
You can configure direct authentication of interfaces in batches by specifying the interface
list in the direct-authen command in the system view.
Run:
system-view
The system view is displayed.
Run:
interface { ethernet | gigabitethernet } interface-number
The interface view is displayed.
Run:
direct-authen enable
Direct authentication is enabled on the interface.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
Quidway S9300 Terabit Routing Switch
Configuration Guide - Security
Issue 06 (2010–01–08)