Displaying And Debugging 802.1X; Configuration Example; 802.1X Configuration Example - H3C S3600 Series Operation Manual

Operation Manual – 802.1x
H3C S3600 Series Ethernet Switches-Release 1510
Caution:
The Guest VLAN function is available only when the switch operates in the
port-based authentication mode.
Only one Guest VLAN can be configured for each switch.

1.6 Displaying and Debugging 802.1x

After performing the above configurations, you can display and verify the
802.1x-related configuration by executing the display command in any view.
You can clear 802.1x-related statistics information by executing the reset command in
user view.
Table 1-7 Display and debug 802.1x
Display the configuration,
session,
information about 802.1x
Clear
statistics information

1.7 Configuration Example

1.7.1 802.1x Configuration Example

I. Network requirements
Authenticate users on all ports to control their accesses to the Internet. The switch
operates in MAC address-based access control mode.
All supplicant systems that pass the authentication belong to the default domain
named "aabbcc.net". The domain can accommodate up to 30 users. As for
authentication, a supplicant system is authenticated locally if the RADIUS server
fails. And as for accounting, a supplicant system is disconnected by force if the
RADIUS server fails. The name of an authenticated supplicant system is not
suffixed with the domain name. A connection is terminated if the total size of the
data passes through it during a period of 20 minutes is less than 2,000 bytes.
The switch is connected to a server comprising of two RADIUS servers whose IP
addresses are 10.11.1.1 and 10.11.1.2. The RADIUS server with an IP address of
10.11.1.1 operates as the primary authentication server and the secondary
accounting server. The other operates as the secondary authentication server and
Operation
display dot1x [ sessions
and statistics | statistics ] [ interface
interface-list ]
802.1x-related reset dot1x statistics
[ interface interface-list ]
Command
1-19
Chapter 1 802.1x Configuration
Description
This command can be
executed in any view.
Execute this command in
user view.