3Com 4210 PWR Configuration Manual page 223

Only disconnects the supplicant system but sends no Trap packets;
■
Sends Trap packets without disconnecting the supplicant system.
■
This function needs the cooperation of 802.1x client and a CAMS server.
The 802.1x client needs to capable of detecting multiple network adapters,
■
proxies, and IE proxies.
The CAMS server is configured to disable the use of multiple network adapters,
■
proxies, or IE proxies.
By default, an 802.1x client program allows use of multiple network adapters,
proxies, and IE proxies. In this case, if the CAMS server is configured to disable use
of multiple network adapters, proxies, or IE proxies, it prompts the 802.1x client to
disable use of multiple network adapters, proxies, or IE proxies through messages
after the supplicant system passes the authentication.
n
The client-checking function needs the support of 3Com's 802.1x client
■
program.
To implement the proxy detecting function, you need to enable the function on
■
both the 802.1x client program and the CAMS server in addition to enabling
the client version detecting function on the switch by using the dot1x
version-check command.
Checking the client version
With the 802.1x client version-checking function enabled, a switch checks the
version and validity of an 802.1x client to prevent unauthorized users or users with
earlier versions of 802.1x client from logging in.
This function makes the switch to send version-requesting packets again if the
802.1x client fails to send version-reply packet to the switch when the
version-checking timer times out.
n
The 802.1x client version-checking function needs the support of 3Com's
■
802.1x client program.
The Guest VLAN function
The Guest VLAN function enables supplicant systems that are not authenticated to
access network resources in a restrained way.
The Guest VLAN function enables supplicant systems that do not have 802.1x
client installed to access specific network resources. It also enables supplicant
systems that are not authenticated to upgrade their 802.1x client programs.
With this function enabled:
The switch sends authentication request (EAP-Request/Identity) packets to all
■
the 802.1x-enabled ports.
After the maximum number retries have been made and there are still ports
■
that have not sent any response back, the switch will then add these ports to
the Guest VLAN.
Introduction to 802.1x 221