Configuring 802.1X Authentication; Establishing The Configuration Task; Enabling Global 802.1X Authentication - Huawei Quidway S3700 Series Configuration Manual

Quidway S3700 Series Ethernet Switches
Configuration Guide - Security
<Quidway> display web-auth-server configuration
Listening port
Portal
Include reply message : enabled
------------------------------------------------------------------------
Web-auth-server Name : hw1
IP-address
Shared-key
Port / PortFlag
URL
------------------------------------------------------------------------
1 Web authentication server(s) in total

2.4 Configuring 802.1x Authentication

This section describes how to configure the 802.1x authentication function.

2.4.1 Establishing the Configuration Task

Applicable Environment
You can configure 802.1x to implement port-based network access control, that is, to
authenticate and control access devices on an interface of a LAN access control device.
Pre-configuration Tasks
802.1x authentication is only an implementation scheme to authenticate the user identity. To
complete the user identity authentication, you need to select the RADIUS or local authentication
method. Before configuring 802.1x authentication, complete the following tasks:
l
l
l
Data Preparation
To configure 802.1x, you need the following data.
No.
1

2.4.2 Enabling Global 802.1x Authentication

Context
Before the configuration of 802.1x authentication, 802.1x needs to be globally enabled first.
Issue 01 (2011-07-15)
: 2000
: version 1, version 2
: 192.168.1.100
: huawei
: 50100 / NO
:
Configuring the ISP authentication domain and AAA schemes, that is, RADIUS or local
authentication schemes, for the 1x user
Configuring the user name and password on the RADIUS server if RADIUS authentication
is used
Adding the user name and password manually on the S3700 if local authentication is used
Data
Number of the interface on which 802.1x authentication is enabled
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
2 NAC Configuration
55