H3C MSR 20-20 Command Reference Manual page 1909

View
Parameter
Description
Related command:
Example
undo dot1x supp-proxy-check { logoff | trap } [ interface interface-list ]
In Ethernet interface view:
dot1x supp-proxy-check { logoff | trap }
undo dot1x supp-proxy-check { logoff | trap }
System view/interface view
logoff: Logs off any user trying to login through a proxy.
trap: Sends a trap packet to the network management system when detecting
that a user is trying to login through a proxy.
interface interface-list: Specifies an Ethernet port list, which can contain multiple
Ethernet ports. The interface-list argument is in the format of interface-list =
{ interface-type interface-number [ to interface-type interface-number ] } &
<1-10>, where interface-type represents the port type, interface-number
represents the port number, and & <1-10> means that you can provide up to 10
port indexes/port index lists for this argument. The start port number must be
smaller than the end number and the two ports must be of the same type.
Use the dot1x supp-proxy-check
users logging in through proxies for specified or all ports.
Use the
undo dot1x supp-proxy-check
specified or all ports.
By default, the function is disabled.
Note that:
This function requires the cooperation of the 802.1x client program of H3C.
■
In system view, this command enables detection and control of users' login for
■
all ports with interface-list not provided, and enables detection and control of
users' login for specified with interface-list provided.
In interface view, you cannot specify the interface-list argument and can only
■
enable detection and control of users' login for the current port.
This function must be enabled both globally in system view and for the
■
intended ports in system view or interface view. Otherwise, it does not work.
display dot1x.
# Specify ports Ethernet 1/1 to 1/8 to get offline users trying to login through
proxies.
<Sysname> system-view
[Sysname] dot1x supp-proxy-check logoff
[Sysname] dot1x supp-proxy-check logoff interface ethernet 1/1 to ethernet 1/8
command to enable detection and control of
command to disable the function for
1909