Displaying And Maintaining 802.1X; 802.1X Authentication Configuration Example; Network Requirements - HPE FlexNetwork MSR Series Comware 5 Security Configuration Manual

Step
1. Enter system view.
2. Enter Layer 2
Ethernet interface
view.
3. Enable the 802.1X
MAC address
binding feature.
4. Manually configure
802.1X MAC
address binding
entries.

Displaying and maintaining 802.1X

Task
Display 802.1X session
information, statistics, or
configuration information of
specified or all ports.
Clear 802.1X statistics.

802.1X authentication configuration example

Network requirements

As shown in
port Ethernet 1/1. Implement MAC-based access control on the port, so the logoff of one user does
not affect other online 802.1X users.
Use RADIUS servers to perform authentication, authorization, and accounting for the 802.1X users.
If RADIUS authentication fails, perform local authentication on the access device. If RADIUS
accounting fails, the access device logs the user off.
Configure the host at 10.1.1.1/24 as the primary authentication and accounting servers, and the host
at 10.1.1.2/24 as the secondary authentication and accounting servers. Assign all users to the ISP
domain aabbcc.net, which accommodates up to 30 users.
Configure the shared key as name for packets between the access device and the authentication
server, and the shared key as money for packets between the access device and the accounting
server.
Command
system-view
interface interface-type interface-number
dot1x binding-mac enable
dot1x binding-mac mac-address
Command
display dot1x [ sessions | statistics ]
[ interface interface-list ] [ | { begin | exclude |
include } regular-expression ]
reset dot1x statistics [ interface interface-list ]
Figure 43, the access device performs 802.1X authentication for users that connect to
101
Remarks
N/A
N/A
By default, the 802.1X
MAC address binding
feature is disabled.
Optional.
By default, no 802.1X
MAC address binding
entries are configured on
the port.
Remarks
Available in any view.
Available in user view.