3Com 4210 PWR Configuration Manual page 229

n
Enabling
DHCP-triggered
Authentication
Configuring Guest VLAN
Table 165 Configure client version checking
Operation Command
Enable In system dot1x version-check [
802.1x view interface interface-list ]
client
In port interface interface-type
version
view interface-number
checking
dot1x version-check
quit
Set the maximum dot1x retry-version-max
number of retires to max-retry-version-value
send version checking
request packets
Set the client version dot1x timer ver-period
checking period timer ver-period-value
As for the dot1x version-user command, if you execute it in system view without
specifying the interface-list argument, the command applies to all ports. You can
also execute this command in port view. In this case, this command applies to the
current port only and the interface-list argument is not needed.
After performing the following configuration, 802.1X allows running DHCP on
access users, and users are authenticated when they apply for dynamic IP
addresses through DHCP.
Table 166 Enable DHCP-triggered authentication
Operation Command
Enter system view system-view
Enable dot1x dhcp-launch
DHCP-triggered
authentication
Table 167 Configure Guest VLAN
Operation
Enter system view
Configure port access method dot1x port-method
Enable the In system view dot1x guest-vlan
Guest VLAN
function
In port view
Advanced 802.1x Configuration
Command
system-view
portbased
vlan-id [ interface
interface-list ]
interface interface-type
interface-number
dot1x guest-vlan
vlan-id
quit
Remarks
Required
By default, 802.1x client version
checking is disabled on a port.
Optional
By default, the maximum number
of retires to send version checking
request packets is 3.
Optional
By default, the timer is set to 30
seconds.
Remarks
-
Required
By default, DHCP-triggered
authentication is disabled.
Remarks
-
Required
The default port access method is
MAC-address-based. That is, the
macbased keyword is used by
default.
Required
By default, the Guest VLAN
function is disabled.
227