Setting The Port Access Control Method; Checking The Users That Log On The Switch Via Proxy; Setting The Supplicant Number On A Port - Huawei Quidway S6500 Series Operation Manual

Operation Manual - Security
Quidway S6500 Series Ethernet Switches

1.2.3 Setting the Port Access Control Method

The following commands are used for setting 802.1x access control method on the
specified port. When no port is specified in system view, the access control method of
port is configured globally.
Perform the following configurations in system view or Ethernet port view.
Table 1-3 Setting the port access control method
Set port access control method
Restore the default port access
control method
By default, 802.1x authentication method on the port is macbased. That is,
authentication is performed based on MAC addresses.

1.2.4 Checking the Users that Log on the Switch via Proxy

The following commands are used for checking the users that log on the switch via
proxy.
Perform the following configurations in system view or Ethernet port view.
Table 1-4 Checking the users that log on the switch via proxy
Enable the check for access
users via proxy
Cancel the check for access
users via proxy
These commands can be used to set on the specified interface when executed in
system view. The parameter interface-list cannot be input when the command is
executed in Ethernet Port view and it has effect only on the current interface. After
globally enabling proxy user detection and control in system view, only if you enable
this feature on a specific port can this configuration take effects on the port.

1.2.5 Setting the Supplicant Number on a Port

The following commands are used for setting number of users allowed by 802.1x on
specified port. When no port is specified, all the ports accept the same number of
supplicants.
Perform the following configurations in system view or Ethernet port view.
Operation
Operation
Huawei Technologies Proprietary
Command
dot1x port-method
portbased } [ interface interface-list ]
undo dot1x port-method
interface-list ]
Command
dot1x supp-proxy-check { logoff | trap }
[ interface interface-list ]
undo dot1x supp-proxy-check { logoff |
trap } [ interface interface-list ]
1-5
Chapter 1 802.1x Configuration
{
macbased
[
interface
|