3Com 8807 Configuration Manual page 226

226 C 25: 802.1
HAPTER
Setting the
Authentication in DHCP
Environment
Configuring
Authentication Method
for 802.1x User
n
Configuring Guest VLAN
C
X ONFIGURATION
Table 188 Setting maximum number of users via specified port
Operation
Restore the maximum number of users on the
port to the default value
By default, 802.1x allows up to 1024 supplicants on each port for 3Com Switch
8800 Family Series Routing Switches (hereinafter referred to as Switch 8800 Family
series), and an Switch 8800 Family series routing switch can accommodate total of
2048 supplicants.
If in DHCP environment the users configure static IP addresses, you can set 802.1x
to disable the switch to trigger the user ID authentication over them with the
following command.
Perform the following configuration in system view.
Table 189 Set the Authentication in DHCP Environment
Operation
Disable the switch to trigger the user ID
authentication over the users who configure
static IP addresses in DHCP environment
Enable the switch to trigger the
authentication over them
By default, the switch can trigger the user ID authentication over the users who
configure static IP addresses in DHCP environment.
The following commands can be used to configure the authentication method for
802.1x user. Three kinds of methods are available: PAP authentication (RADIUS
server must support PAP authentication), CHAP authentication (RADIUS server
must support CHAP authentication), EAP relay authentication (switch send
authentication information to RADIUS server in the form of EAP packets directly
and RADIUS server must support EAP authentication).
Perform the following configuration in system view.
Table 190 Configure authentication method for 802.1x user
Operation
Configure authentication method for 802.1x
user
Restore the default authentication method for
802.1x user
By default, CHAP authentication is used for 802.1x user authentication.
When you are configuring authentication methods for 802.1x users, the
authentication method on the switch must be consistent with that on the
authentication server.
If Guest VLAN is enabled, a switch broadcasts active authentication packets to all
802.1x-enabled ports. The ports not sending response packets are added to Guest
Command
undo dot1x max-user [ interface
interface-list ]
Command
dot1x dhcp-launch
undo dot1x dhcp-launch
Command
dot1x authentication-method { chap | pap
| eap md5-challenge}
undo dot1x authentication-method