Dot1X Smarton Password - H3C MSR Series Command Reference Manual

Predefined user roles
network-admin
Usage guidelines
The SmartOn feature and the online user handshake feature are mutually exclusive.
When a SmartOn-enabled port receives an EAPOL-Start packet from an 802.1X client, it sends a
unicast EAP-Request/Notification packet to the client. The client will respond with an
EAP-Response/Notification packet, which contains the SmartOn switch ID and the MD5 digest of the
SmartOn password. The device compares the digest in the packet with the digest on the device. If
they are the same, the device continues to perform 802.1X authentication for the client. Otherwise,
the device denies the client's 802.1X authentication request.
Examples
# Enable the SmartOn feature on port GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] dot1x smarton
Related commands
display dot1x
dot1x smarton switched

dot1x smarton password

dot1x smarton password
Use dot1x smarton password to set a SmartOn password.
Use undo dot1x smarton password to restore the default.
Syntax
dot1x smarton password { cipher | simple } string
undo dot1x smarton password
Default
No SmartOn password is set.
Views
System view
Predefined user roles
network-admin
Parameters
cipher: Specifies a password in encrypted form.
simple: Specifies password in plaintext form. For security purposes, the password specified in
plaintext form will be stored in encrypted form.
string: Specifies the password. Its plaintext form is a case-sensitive string of 1 to 16 characters. Its
encrypted form is a case-sensitive string of 1 to 53 characters
Usage guidelines
The device checks
EAP-Response/Notification packet. If the digest is different from the SmartOn password digest on
the device, the device stops the 802.1X authentication process for the client that sends this packet.
the MD5 digest of
181
the SmartOn password in each received