Habp Configuration; Introduction To Habp; Habp Server Configuration - H3C S5100-SI Operation Manual

3

HABP Configuration

When configuring HABP, go to these sections for information you are interested in:

Introduction to HABP

HABP Server Configuration

HABP Client Configuration
Displaying and Maintaining HABP Configuration
Introduction to HABP
When a switch is configured with the 802.1x function, 802.1x will authenticate and
authorize 802.1x-enabled ports and allow only the authorized ports to forward packets. In
case a port fails 802.1x authentication and authorization, service packets from and to that
port will be blocked, making it impossible to manage the switch attached to the port. The
Huawei Authentication Bypass Protocol (HABP) aims at solving this problem.
An HABP packet carries the MAC addresses of the attached switches with it. It can bypass
the 802.1x authentications when traveling between HABP-enabled switches, through
which management devices can obtain the MAC addresses of the attached switches and
thus the management of the attached switches is feasible.
HABP is built on the client-server model. Typically, the HABP server sends HABP requests
to the client periodically to collect the MAC address(es) of the attached switch(es). The
client responds to the requests, and forwards the HABP requests to the attached
switch(es). The HABP server usually runs on the administrative device while the HABP
client runs on the attached switches.
For ease of switch management, it is recommended that you enable HABP for
802.1x-enabled switches.
HABP Server Configuration
With the HABP server launched, a management device sends HABP request packets
regularly to the attached switches to collect their MAC addresses. You need also to
configure the interval on the management device for an HABP server to send HABP
request packets.
Follow these steps to configure an HABP server:
To do...
Enter system view
Enable HABP
Use the command...
system-view
habp enable
3-1
Remarks
—
Optional
By default, HABP is enabled.