H3C S3100 Series Operation Manual page 364

1 802.1x Configuration ·································································································································1-1
Introduction to 802.1x······························································································································1-1
Architecture of 802.1x Authentication······························································································1-1
The Mechanism of an 802.1x Authentication System ·····································································1-2
Encapsulation of EAPoL Messages ································································································1-3
802.1x Authentication Procedure ····································································································1-5
Timers Used in 802.1x·····················································································································1-8
802.1x Implementation on an S3100 Series Switch········································································1-9
Introduction to 802.1x Configuration ·····································································································1-13
Basic 802.1x Configuration ···················································································································1-14
Configuration Prerequisites ···········································································································1-14
Configuring Basic 802.1x Functions······························································································1-14
Timer and Maximum User Number Configuration·········································································1-16
Advanced 802.1x Configuration············································································································1-17
Specifying a Mandatory Authentication Domain for a Port····························································1-17
Configuring Proxy Checking··········································································································1-19
Configuring Client Version Checking·····························································································1-19
Enabling DHCP-triggered Authentication ······················································································1-20
Enabling the Unicast Trigger Function for 802.1X Authentication ················································1-20
Configuring Guest VLAN ···············································································································1-21
Configuring Auth-Fail VLAN for 802.1X Authentication·································································1-21
Configuring 802.1x Re-Authentication···························································································1-22
Configuring the 802.1x Re-Authentication Timer ··········································································1-22
Displaying and Debugging 802.1x ········································································································1-23
Configuration Example··························································································································1-23
802.1x Configuration Example ······································································································1-23
802.1X Mandatory Authentication Domain Configuration Example ··············································1-26
2 Quick EAD Deployment Configuration····································································································2-1
Introduction to Quick EAD Deployment ··································································································2-1
Quick EAD Deployment Overview···································································································2-1
Operation of Quick EAD Deployment······························································································2-1
Configuring Quick EAD Deployment·······································································································2-2
Configuration Prerequisites ·············································································································2-2
Configuration Procedure··················································································································2-2
Displaying and Maintaining Quick EAD Deployment ······································································2-3
Quick EAD Deployment Configuration Examples···················································································2-3
Troubleshooting ······································································································································2-5
3 HABP Configuration ··································································································································3-1
Introduction to HABP·······························································································································3-1
HABP Server Configuration ····················································································································3-1
HABP Client Configuration······················································································································3-2
Displaying HABP·····································································································································3-2
Table of Contents
i