Optional) Enabling Dhcp Packets To Trigger Authentication; Optional) Configuring 802.1X Timers - Huawei Quidway S3700 Series Configuration Manual

Quidway S3700 Series Ethernet Switches
Configuration Guide - Security
----End

2.4.9 (Optional) Enabling DHCP Packets to Trigger Authentication

Context
After DHCP packets are enabled to trigger authentication, 802.1x allows the S3700 to trigger
the user identity authentication when the access user runs DHCP to apply for the IP address. In
this case, an 802.1x user is authenticated without dial-up by using the client software. This speeds
up network deployment.
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
dot1x dhcp-trigger
Dynamic Host Configuration Protocol (DHCP) packets are enabled to trigger user
authentication.
By default, DHCP packets do not trigger authentication.
After you run the dot1x dhcp-trigger command, users cannot obtain IP addresses through
DHCP if they do not pass the authentication.
----End

2.4.10 (Optional) Configuring 802.1x Timers

Context
When enabled, 802.1x starts many timers to ensure the reasonable and ordered exchanges
between supplicants, the authenticator, and the authentication server.
To adjust the exchange process, you can run some commands to change values of some timers,
but some timers cannot be adjusted. It may be necessary in certain cases or in poor networking
environment. Normally, it is recommended that you retain the default settings of the timers.
Procedure
Step 1 Run:
system-view
The system view is displayed.
Issue 01 (2011-07-15)
NOTE
When users are online on the S3700, you can use this command. The command is invalid for existing
online users, but takes effect for users who undergo authentication after the command is run.
The maximum number of NAC users allowed by the S3700 is 256.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
2 NAC Configuration
62