Huawei Quidway S3100 Series Operation Manual page 216

Operation Manual – 802.1x
Quidway S3100 Series Ethernet Switches
Operation
Set port
control mode for
specified ports
Set port
method
specified ports
Set authentication
method for 802.1x
users
Enter ISP domain
view to configure
the ISP domain
Configure the AAA
scheme
adopted in the ISP
domain
Quit the
view
system view
Create a local user
account and enter
local user view
Set a password for
the local
account
Set the
type and user level
for the local user
Quit the
view
system view
dot1x
access
{ authorized-force
unauthorized-force | auto }
[ interface interface-list ]
access dot1x
for { macbased | portbased }
[ interface interface-list ]
dot1x
authentication-method
{ chap | pap | eap }
domain isp-name
scheme { radius-scheme
to be
radius-scheme-name
[ local ] | local | none }
current
and enter quit
local-user user-name
password
user
cipher } password
service
service-type lan-access
current
and enter quit
Huawei Technologies Proprietary
Command
port-control
|
port-method
{ simple |
1-14
Chapter 1 802.1x Configuration
Description
Optional
By default, an 802.1x-enabled
port operates in an auto
mode.
Optional
The default port
method
MAC-address-based (that is,
the macbased keyword is
used by default).
Optional
By default, a switch performs
CHAP authentication in EAP
terminating mode.
Optional
The default ISP domain is
"system". This command is
required if the name of the ISP
domain to which the current
802.1x user belongs is not
"system".
Optional
By default, a switch adopts a
local authentication scheme.
—
Optional
This command is required if
you specify to adopt a local
authentication scheme.
—
Optional
This command is required if
you specify to adopt a local
authentication scheme.
The default user level is 0
—
access
is