H3C S6812 Series Command Reference Manual page 1785

Usage guidelines
The online user handshake security feature enables the device to prevent users from using illegal
client software.
The feature is implemented based on the online user handshake feature. To bring the security
function into effect, make sure the online user handshake feature is enabled.
The online user handshake security feature takes effect only on the network where the iNode client
and IMC server are used.
Examples
# Enable the online user handshake security feature on Ten-GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface ten-gigabitethernet 1/0/1
[Sysname-Ten-GigabitEthernet1/0/1] dot1x handshake secure
Related commands
display dot1x
dot1x handshake
dot1x mandatory-domain
Use dot1x mandatory-domain to specify a mandatory 802.1X authentication domain on a port.
Use undo dot1x mandatory-domain to restore the default.
Syntax
dot1x mandatory-domain domain-name
undo dot1x mandatory-domain
Default
No mandatory 802.1X authentication domain is specified on a port.
Views
Ethernet interface view
Predefined user roles
network-admin
Parameters
domain-name: Specifies the ISP domain name, a case-insensitive string of 1 to 255 characters.
Usage guidelines
When the system authenticates an 802.1X user trying to access a port, it selects an authentication
domain in the following order:
1. Mandatory domain.
2. ISP domain specified in the username.
3. Default ISP domain.
Examples
# Specify my-domain as the mandatory authentication domain for 802.1X users on
Ten-GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface ten-gigabitethernet 1/0/1
[Sysname-Ten-GigabitEthernet1/0/1] dot1x mandatory-domain my-domain
17