X Configuration Example; Displaying And Maintaining 802.1X - H3C S7500E Series Operation Manual

Operation Manual – 802.1x - MAC Authentication
H3C S7500E Series Ethernet Switches
Note:
You can specify a tagged VLAN as the guest VLAN for a Hybrid port, but the guest
VLAN does not take effect. Similarly, if a guest VLAN for a Hybrid port is in operation,
you cannot configure the guest VLAN to carry tags.
Configurations in system view are effective to all ports while configurations in
interface view are effective to the current port only.
If a port's access control method is portbased, its guest VLAN can take effect; if a
port's access control method is macbased, its guest VLAN can be configured but
cannot take effect.
A port can be configured with only one guest VLAN. But different ports can have
different guest VLANs.
The 802.1x multicast trigger function must be enabled for the Guest VLAN function
to take effect.
Caution:
If the data flows from a user-side device include VLAN tags, and 802.1x and guest
VLAN are enabled on the access port, you are recommended to configure different
VLAN IDs for the Voice VLAN, the default port VLAN, and the guest VLAN of 802.1x.

1.4 Displaying and Maintaining 802.1x

Display 802.1x session
information, statistics, or
configuration information
of specified or all ports
Clear 802.1x statistics

1.5 802.1x Configuration Example

I. Network requirements
The access control method of macbased is required on the port to control
supplicants.
All supplicants belong to default domain aabbcc.net, which can accommodate up
to 30 users. RADIUS authentication is performed at first, and then local
To do...
display dot1x [ sessions
| statistics ] [ interface
interface-list ]
reset dot1x statistics
[ interface interface-list ]
Use the command...
1-17
Chapter 1 802.1x Configuration
Remarks
Available in any view
Available in user view