Displaying And Maintaining 802.1X; X Configuration Example - 3Com Switch 4800G 24-Port Configuration Manual

Displaying and
Maintaining 802.1x
802.1x Configuration
Example
To do...
Configure the guest VLAN for
specified or all ports
n
You can specify a tagged VLAN as the guest VLAN for a Hybrid port, but the
■
guest VLAN does not take effect. Similarly, if a guest VLAN for a Hybrid port is
in operation, you cannot configure the guest VLAN to carry tags.
Configurations in system view are effective to all ports while configurations in
■
interface view are effective to the current port only.
If a port's access control method is portbased, its guest VLAN can take effect;
■
if a port's access control method is macbased, its guest VLAN can be
configured but cannot take effect.
A port can be configured with only one guest VLAN. But different ports can
■
have different guest VLANs.
c
CAUTION: If the data flows from a user-side device include VLAN tags, and
802.1x and guest VLAN are enabled on the access port, you are recommended to
configure different VLAN IDs for the Voice VLAN, the default port VLAN, and the
guest VLAN of 802.1x.
To do...
Display 802.1x session
information, statistics, or
configuration information of
specified or all ports
Clear 802.1x statistics
Network requirements
The access control method of macbased is required on the port to control
■
supplicants.
All supplicants belong to default domain aabbcc.net, which can accommodate
■
up to 30 users. RADIUS authentication is performed at first, and then local
authentication when no response from the RADIUS server is received. If the
RADIUS accounting fails, the authenticator gets users offline.
A server group with two RADIUS servers is connected to the switch. The IP
■
addresses of the servers are 10.1.1.1 and 10.1.1.2 respectively. Use the former
as the primary authentication/secondary accounting server, and the latter as
the secondary authentication/primary accounting server.
Set the shared key for the switch to exchange packets with the authentication
■
server and the accounting server as secret.

Displaying and Maintaining 802.1x

Use the command...
dot1x guest-vlan vlan-id
[ interface interface-list ]
Or in Ethernet interface view
interface interface-type
interface-number
dot1x guest-vlan vlan-id
Use the command...
display dot1x [ sessions |
statistics ] [ interface
interface-list ]
reset dot1x statistics
[ interface interface-list ]
729
Remarks
Required
By default, a port is
configured with no guest
VLAN.
Remarks
Available in any view
Available in user view