Dot1X Handshake - H3C S5120-SI Series Command Reference Manual

In system view, this command configures a guest VLAN for all Layer 2 Ethernet ports if you do not
specify the interface-list argument, and configures a guest VLAN for specified ports if you specify
the interface-list argument.
In interface view, you cannot specify the interface-list argument and can only configure guest VLAN
for the current port.
You must enable 802.1X for a guest VLAN to take effect.
You must enable the 802.1X multicast trigger function for a PGV to take effect.
If you change the port access method from portbased to macbased, the port will leave the guest
VLAN.
It is not allowed to delete a VLAN that is configured as a guest VLAN. To delete such a VLAN, you
need to remove the guest VLAN configuration first.
You can configure both an Auth-Fail VLAN and a guest VLAN for a port, but they cannot both take
effect at a time.
Related commands: dot1x; dot1x port-method; dot1x multicast-trigge.
Examples
# Specify port GigabitEthernet 1/0/7 to use VLAN 3 as its guest VLAN.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/7
[Sysname-GigabitEthernet1/0/7] dot1x port-method portbased
[Sysname-GigabitEthernet1/0/7] dot1x guest-vlan 3

dot1x handshake

Syntax
dot1x handshake
undo dot1x handshake
View
Ethernet Interface view
Default Level
2: System level
Parameters
None
Description
Use the dot1x handshake command to enable the online user handshake function so that the device
can periodically send handshake messages to the client to check whether a user is online.
Use the undo dot1x handshake command to disable the function.
By default, the function is enabled.
Note that: To ensure that the online user handshake function can work normally, you are recommended
to use the iNode client software.
1-8