Dot1X Domain-Delimiter - H3C MSR Series Command Reference Manual

Comware 7 security
Hide thumbs Also See for MSR Series:
Table of Contents

Advertisement

Usage guidelines
An 802.1X critical VLAN accommodates users that have failed 802.1X authentication because all the
RADIUS servers in their ISP domains are unreachable.
To delete a VLAN that has been configured as an 802.1X critical VLAN, you must first use the undo
dot1x critical vlan command.
Examples
# Specify VLAN 100 as the 802.1X critical VLAN on port GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] dot1x critical vlan 100
Related commands
display dot1x

dot1x domain-delimiter

Use dot1x domain-delimiter to specify a set of domain name delimiters supported by the device.
Use undo dot1x domain-delimiter to restore the default.
Syntax
dot1x domain-delimiter string
undo dot1x domain-delimiter
Default
The device supports only the at sign (@) delimiter for 802.1X users.
Views
System view
Predefined user roles
network-admin
Parameters
string: Specifies a set of 1 to 16 domain name delimiters for 802.1X users. No space is required
between delimiters. Available delimiters include the at sign (@), backslash (\), dot (.), and forward
slash (/). If you want to use backslash (\) as the domain name delimiter, you must enter the escape
character (\) along with the backslash (\) sign.
Usage guidelines
Any character in the configured set can be used as the domain name delimiter for 802.1X
authentication users. Usernames that include domain names can use the format of
username@domain-name,
username/domain-name.
The delimiter set you configured overrides the default setting. If the at sign (@) is not included in the
delimiter set, the device does not support the 802.1X users that use this sign as the domain name
delimiter.
If a username string contains multiple configured delimiters, the device takes the rightmost delimiter
in the username string as the domain name delimiter. For example, if you configure the forward slash
(/), dot (.), and backslash (\) as delimiters, the domain name delimiter for the username string
121.123/22\@abc is the backslash (\). The username is @abc and the domain name is 121.123/22.
domain-name\username,
167
username.domain-name,
or

Advertisement

Table of Contents
loading

Table of Contents