Chapter 3 Habp Configuration; Habp Overview; Configuring Habp Server - Huawei Quidway S3000-EI Series Operation Manual

Operation Manual - Security
Quidway S3000-EI Series Ethernet Switches
Chapter 3 HABP C
3.1 HAB P Overview
If 802.1x attribute is configured at a swit
those ports where 802.1x is enabled. Only those which pass the authentication are able
to fo rward packets. For those ports where 80
be filtered by 802.1x attribute, so the management over them is also imp
HABP(Huawei Authentication Bypass Protocol) attribute can be used
problem.
HABP packets contain the MAC address and other information of the member switches.
When HABP attribute is enabled at the management switch, 802.1x authentication will
be skipped for HABP packets, so management over switches is possible.
HA P includes HABP server and HABP client. In general, the B
HABP request packets to the client to collect the MAC add
switches, while the
low r-level switches. HABP server is often enabled at the management switch, while e
HAB P client is at the member switches.
HAB P attribute had better be enabled at a switch whe
3.2 HABP configuration
HABP attribute configuration tasks include:

Configuring HABP server

Configuring HABP client
3.2.1 Con figuring HABP Server
Whe n HABP server is enabled, the management switch send
to it s member switches to collect their MAC addresses, for the conv
management. You
on the management switch.
To c onfigure HABP server, follow these steps:
Enable HABP attribute
Configure HABP server
Set time interval for HABP request transmission
Plea se perform the following operations in system view.
ch, on a switch, 802.1x will run authentication at
client responds to the request packets and forwards them to the
can define the time interval for transmitting HABP request packets
Huawei Technologies Proprietary
3-1

Chapter 3 HABP Configuration

onfiguration
2.1x authentication is skipped, packets will
server regularly sends
resses of the member
re 802.1x is enabled.
s HABP request packets
ossible.
to solve this
enience of