Huawei Quidway S6500 Series Operation Manual page 436

Operation Manual - Security
Quidway S6500 Series Ethernet Switches
Chapter 1 802.1x Configuration ................................................................................................... 1-1
1.1 802.1x Overview ................................................................................................................ 1-1
1.1.1 802.1x Standard Overview...................................................................................... 1-1
1.1.2 802.1x System Architecture .................................................................................... 1-1
1.1.3 802.1x Authentication Process................................................................................ 1-2
1.1.4 Implementing 802.1x on the Ethernet Switch ......................................................... 1-3
1.2 Configuring 802.1x............................................................................................................. 1-3
1.2.1 Enabling/Disabling 802.1x....................................................................................... 1-4
1.2.2 Setting the Port Access Control Mode. ................................................................... 1-4
1.2.3 Setting the Port Access Control Method ................................................................. 1-5
1.2.4 Checking the Users that Log on the Switch via Proxy ............................................ 1-5
1.2.5 Setting the Supplicant Number on a Port................................................................ 1-5
1.2.6 Setting the Authentication in DHCP Environment................................................... 1-6
1.2.7 Configuring the Authentication Method for 802.1x User ......................................... 1-6
1.2.8 Enabling/Disabling Guest VLAN ............................................................................. 1-7
1.2.9 Setting 802.1x Re-authentication ............................................................................ 1-8
1.2.10 Setting 802.1x Client Version Authentication........................................................ 1-9
1.2.11 Setting the Maximum Times of Authentication Request Message Retransmission1-10
1.2.12 Configuring Timers .............................................................................................. 1-11
1.2.13 Enabling/Disabling a Quiet-Period Timer............................................................ 1-12
1.3 Displaying and Debugging 802.1x ................................................................................... 1-13
1.4 802.1x Configuration Example......................................................................................... 1-13
Chapter 2 AAA and RADIUS Protocol Configuration ................................................................ 2-1
2.1 AAA Overview.................................................................................................................... 2-1
2.1.1 AAA ......................................................................................................................... 2-1
2.1.2 Domain .................................................................................................................... 2-2
2.1.3 RADIUS Protocol Overview .................................................................................... 2-2
2.2 Configuring AAA ................................................................................................................ 2-3
2.2.1 Creating an ISP Domain and Configuring the Related Attributes ........................... 2-4
2.2.2 Creating a Local User and Setting the Related Attributes ...................................... 2-9
2.2.3 Disconnecting a User by Force ............................................................................. 2-11
2.2.4 Configuring Dynamic VLAN with RADIUS Server................................................. 2-11
2.3 Configuring the RADIUS Protocol.................................................................................... 2-13
2.3.1 Creating/Deleting a RADIUS Scheme .................................................................. 2-14
2.3.2 Configuring RADIUS Authentication/Authorization Servers.................................. 2-14
2.3.3 Configuring RADIUS Accounting Servers and the Related Attributes .................. 2-15
2.3.4 Setting the RADIUS Packet Encryption Key ......................................................... 2-18
Table of Contents
Huawei Technologies Proprietary
1-1
Table of Contents