Enabling 802.1X Authentication On An Interface; Optional) Enabling Mac Address Bypass Authentication - Huawei AR1200-S Configuration Manual

Huawei AR1200-S Series Enterprise Routers
Configuration Guide - Security
By default, global 802.1x authentication is disabled.
----End

5.3.3 Enabling 802.1x Authentication on an Interface

To perform 802.1x authentication for a user, enable 802.1x authentication on the interface
connected to the user.
Context
802.1x authentication cannot be used together with MAC address authentication on the same
interface.
802.1x authentication can be enabled on an interface in the system view or interface view.
Procedure
l
l
----End

5.3.4 (Optional) Enabling MAC Address Bypass Authentication

If the 802.1x client software cannot be installed or used on some terminals such as printers,
enable MAC address bypass authentication. After MAC address bypass authentication is
enabled, when the AR1200-S initiates 802.1x authentication but does not receive the response
from the terminal, the AR1200-S sends the MAC address of the user terminal as the user name
and password to the authentication server.
Issue 02 (2012-03-30)
Enabling 802.1x authentication on an interface in the system view
1. Run:
system-view
The system view is displayed.
2. Run:
dot1x enable interface { interface-type interface-number1 [ to interface-
number2 ] } &<1-10>
802.1x authentication is enabled on an interface.
By default, 802.1x authentication is disabled on an interface.
Enabling 802.1x authentication on an interface in the interface view
1. Run:
system-view
The system view is displayed.
2. Run:
interface interface-type interface-number
The interface view is displayed.
3. Run:
dot1x enable
802.1x authentication is enabled on the interface.
By default, 802.1x authentication is disabled on an interface.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
5 NAC Configuration
101