2.3 Configuring Web Authentication.....................................................................................................................50

2.3.1 Establishing the Configuration Task.......................................................................................................50

2.3.2 Configuring the Web Authentication Server...........................................................................................51

2.3.3 Binding a Web Authentication Server to an Interface.............................................................................52

2.3.4 (Optional)Configuring the Free Rule for Web Authentication................................................................52

2.3.5 (Optional) Configuring the Web Authentication Policy..........................................................................53

2.3.6 (Optional) Setting the Port that Listens to the Portal Packets.................................................................53

2.3.7 (Optional) Setting the Version of the Portal Protocol Packets................................................................54

2.3.8 Checking the Configuration.....................................................................................................................54

2.4 Configuring 802.1x Authentication..................................................................................................................55

2.4.1 Establishing the Configuration Task.......................................................................................................55

2.4.2 Enabling Global 802.1x Authentication..................................................................................................55

2.4.3 Enabling 802.1x Authentication on an Interface.....................................................................................56

2.4.4 (Optional) Enabling MAC Bypass Authentication..................................................................................57

2.4.5 Setting the Authentication Method for the 802.1x User..........................................................................58

2.4.6 (Optional) Configuring the Interface Access Mode................................................................................59

2.4.7 (Optional) Configuring the Authorization Status of an Interface............................................................60

2.4.8 (Optional) Setting the Maximum Number of Concurrent Access Users.................................................61

2.4.9 (Optional) Enabling DHCP Packets to Trigger Authentication..............................................................62

2.4.10 (Optional) Configuring 802.1x Timers..................................................................................................62

2.4.11 (Optional) Configuring the Quiet Timer Function................................................................................63

2.4.12 (Optional) Configuring 802.1x Re-authentication.................................................................................64

2.4.13 (Optional) Configuring the Guest VLAN for 802.1x Authentication...................................................65

2.4.14 (Optional) Enabling the S3700 to Send Handshake Packets to Online Users.......................................66

2.4.15 (Optional) Setting the Retransmission Count of the Authentication Request.......................................66

2.4.16 Checking the Configuration...................................................................................................................67

2.5 Configuring MAC Address Authentication......................................................................................................68

2.5.1 Establishing the Configuration Task.......................................................................................................68

2.5.2 Enabling Global MAC Address Authentication......................................................................................68

2.5.3 Enabling MAC Address Authentication on an Interface.........................................................................69

2.5.4 Configuring a User Name for MAC Address Authentication.................................................................70

2.5.5 (Optional) Configuring the Domain for MAC Address Authentication..................................................70

2.5.6 (Optional) Setting the Timers of MAC Address Authentication.............................................................71

2.5.7 (Optional) Configuring the Guest VLAN for MAC Address Authentication.........................................72

2.5.8 (Optional) Setting the Maximum Number of Access Users Who Adopt MAC Address Authentication

..........................................................................................................................................................................72

2.5.9 (Optional) Re-Authenticating a User with the Specified MAC Address................................................73

2.5.10 Checking the Configuration...................................................................................................................74

2.6 Maintaining NAC.............................................................................................................................................74

2.6.1 Clearing the Statistics About 802.1x Authentication..............................................................................74

2.6.2 Clearing Statistics About MAC Address Authentication........................................................................75

2.7 Configuration Examples...................................................................................................................................75

2.7.1 Example for Configuring Web Authentication.......................................................................................75

Issue 01 (2011-07-15)

Huawei Proprietary and Confidential

Contents

Table of Contents