Dot1X Dhcp-Launch - Huawei Quidway S8500 Series Command Manual

Command Manual – Security
Quidway S8500 Series Routing Switches
Description
Use the dot1x authentication-method command to configure the authentication
method for 802.1x user.
Use the undo dot1x authentication-method command to restore the default
authentication method of 802.1x user.
By default, CHAP authentication is used for 802.1x user authentication.
Password Authentication Protocol (PAP) is a kind of authentication protocol with two
handshakes. It sends password in the form of simple text.
Challenge Handshake Authentication Protocol (CHAP) is a kind of authentication
protocol with three handshakes. It only transmits username but not password. CHAP is
more secure and reliable.
In the process of EAP authentication, switch directly sends authentication information
of 802.1x user to RADIUS server in the form of EAP packet. It is not necessary to
transfer the EAP packet to standard RADIUS packet first and then send it to RADIUS
server.
Please note: To realize PAP, CHAP or EAP authentication, RADIUS server should
support PAP, CHAP or EAP authentication respectively.
Related command: display dot1x.
Example
# Configure 802.1x user to use PAP authentication
[Quidway] dot1x authentication-method pap

1.1.5 dot1x dhcp-launch

Syntax
dot1x dhcp-launch
undo dot1x dhcp-launch
View
System view
Parameter
None
Description
Use the dot1x dhcp-launch command to set 802.1x to disable the switch to trigger the
user ID authentication over the users who configure static IP addresses in DHCP
environment.
Huawei Technologies Proprietary
1-6
Chapter 1 802.1x Configuration Commands