Implementing 802.1X On The Ethernet Switch; Configuring 802.1X - Huawei Quidway S3000-EI Series Operation Manual

Operation Manual - Security
Quidway S3000-EI Series Ethernet Switches
EAPoL-Encapsulated-ASF-Alert is related to the network management information and
terminated by the Authenticator.
802.1x provides an implementation solution of user ID authentication. However, 802.1x
itself is not enough to implement the scheme. The administrator of the access device
should configure the AAA scheme by
assist 802.1x to implement the user ID authentication. For detailed description of AAA,
refer to the corresponding AAA configuration.
1.1.4 Imp lementing 802.1x on the Ethernet Switch
Quidway Series Ethernet Switches not only supp
method regulated by 802.1x, but also extend and optim
Support to connect several End Stations in the downstream via a physical port.
The access control (or the user authentication method) can be based on port or
MAC address.
In this way, the system becomes much securer and easier to manage.

1.2 Configuring 802.1x

The configuration tasks of 802.1x itself can be fulfilled in system view of the Ethernet
switch. When the global 8
of the port. The configured
Note:
When 802.1x is enabled on a port, the max number of MAC address learning which is
c onfigured by the command mac-address max-mac-count cannot be configured on
the port, and vice versa.
The Main 802.1x configuration includes:
Enabling/disabling 802.1x
Setting the port access control mode
Setting the port access control method
Checking the users that log on the sw
Setting the maximum number of u
Setting the Authentication in DHCP Environm
Configuring the authentication method f
Enabling/Disabling Guest VLAN
Setting 802.1x Re-authentication
Setting 802.1x Client Version Authentication
selecting RADIUS or local authentication so as to
02.1x is not enabled, the user can configure the 802.1x state
items will take effect after the global 802.1x is enabled.
itch via proxy
sers via each port
Huawei Technologies Proprietary
1-3
Chapter 1 802.1x Configuration
ort the port access authentication
ize it in the following way:
ent
or 802.1x user