Dot1X Dhcp-Launch - H3C S3100 Series Command Manual

Failing authentication means being denied by the authentication server due to reasons such as
wrong password. Authentication failures caused by authentication timeout or network connection
problems do not fall into this category.
You must enable MAC VLAN for an MAFV to take effect.
After an MAFV takes effect, if you change the port access method from macbased to portbased,
the established MAFV entries will be removed. MAFV entries show the MAC addresses in Auth Fail
VLANs and the configured MAC VLANs, which can be displayed by the display mac-vlan
command.
After a PAFV takes effect, if you change the port access method from portbased to macbased,
the port will leave the Auth-Fail VLAN.
It is not allowed to delete a VLAN that is configured as an Auth-Fail VLAN directly. To delete such a
VLAN, you need to remove the Auth-Fail VLAN configuration first by using the undo dot1x
auth-fail vlan command.
Examples
# Configure VLAN 3 as the Auth-Fail VLAN on port Ethernet 1/0/1.
<Sysname> system-view
[Sysname] interface ethernet 1/0/1
[Sysname-Ethernet1/0/1] dot1x auth-fail vlan 3

dot1x dhcp-launch

Syntax
dot1x dhcp-launch
undo dot1x dhcp-launch
View
System view
Parameter
None
Description
Use the dot1x dhcp-launch command to specify an 802.1x-enabled switch to launch the process to
authenticate a supplicant system when the supplicant system applies for a dynamic IP address through
DHCP.
Use the undo dot1x dhcp-launch command to disable an 802.1x-enabled switch from authenticating
a supplicant system when the supplicant system applies for a dynamic IP address through DHCP.
By default, an 802.1x-enabled switch does not authenticate a supplicant system when the latter applies
for a dynamic IP address through DHCP.
Related command: display dot1x.
Example
# Configure to authenticate a supplicant system when it applies for a dynamic IP address through
DHCP.
<Sysname> system-view
1-7