Enabling 802.1X; Enabling Eap Relay Or Eap Termination - H3C S5830V2 Security Configuration Manual

Tasks at a glance
(Optional.)

Enabling 802.1X

Follow the guideline when you enable 802.1X:
• Do not enable 802.1X on a port that is in a link aggregation or service loopback group.
To enable 802.1X:
Step
1. Enter system view.
2. Enable 802.1X globally.
3. Enter Ethernet interface
view.
4. Enable 802.1X on a port.

Enabling EAP relay or EAP termination

When configuring EAP relay or EAP termination, consider the following factors:
• Support of the RADIUS server for EAP packets
Authentication methods supported by the 802.1X client and the RADIUS server
•
If the client is using only MD5-Challenge EAP authentication or the "username + password" EAP
authentication initiated by an H3C iNode 802.1X client, you can use both EAP termination and EAP relay.
To use EAP-TL, PEAP, or any other EAP authentication methods, you must use EAP relay. When you make
your decision, see
For more information about EAP relay and EAP termination, see
To configure EAP relay or EAP termination:
Step
1. Enter system
view.
2. Configure EAP
relay or EAP
termination.
Enabling the periodic online user re-authentication function
Command
system-view
dot1x
interface interface-type interface-number
dot1x
"Comparing EAP relay and EAP
Command
system-view
dot1x authentication-method
{ chap | eap | pap }
termination" for help.
"802.1X authentication
Remarks
N/A
By default, the network access device performs EAP
termination and uses CHAP to communicate with the
RADIUS server.
Specify the eap keyword to enable EAP termination.
Specify the chap or pap keyword to enable
CHAP-enabled or PAP-enabled EAP relay.
69
Remarks
N/A
By default, 802.1X is disabled
globally.
N/A
By default, 802.1X is disabled
on a port.
procedures."