Setting The Authentication In Dhcp Environment; Configuring The Authentication Method For 802.1X User - Huawei Quidway S6500 Series Operation Manual

Operation Manual - Security
Quidway S6500 Series Ethernet Switches
Table 1-5 Setting the maximum number of users via a specified port
Set maximum number of users via
specified port
Restore the maximum number of users on
the port to the default value
By default, 802.1x allows up to 1024 supplicants on each port for S6500 Series
Ethernet switches.

1.2.6 Setting the Authentication in DHCP Environment

If in DHCP environment the users configure static IP addresses, you can set 802.1x to
disable the switch to trigger the user ID authentication over them with the following
command.
Perform the following configurations in system view.
Table 1-6 Setting the Authentication in DHCP Environment
Disable the switch to trigger the user ID authentication
over the users who configure static IP addresses in
DHCP environment
Enable the switch to trigger the authentication over
them
By default, the switch can trigger the user ID authentication over the users who
configure static IP addresses in DHCP environment.

1.2.7 Configuring the Authentication Method for 802.1x User

The following commands can be used to configure the authentication method for
802.1x user. Three kinds of methods are available: PAP authentication (RADIUS server
must support PAP authentication), CHAP authentication (RADIUS server must support
CHAP authentication), EAP relay authentication (switch send authentication
information to RADIUS server in the form of EAP packets directly and RADIUS server
must support EAP authentication).
For EAP authentication, PEAP, EAP-TLS and EAP-MD5 methods are available on the
switch:
EAP-TLS: The client and RADIUS server check in EAP-TLS approach mutually
the security certificate authority of the other's, to guarantee the validity of the
certificates and prevent data from being illegally used.
Operation
Operation
Huawei Technologies Proprietary
1-6
Chapter 1 802.1x Configuration
Command
dot1x max-user
[ interface interface-list ]
undo dot1x max-user [ interface
interface-list ]
Command
dot1x dhcp-launch
undo
dhcp-launch
user-number
dot1x