Habp Configuration; Introduction To Habp; Habp Server Configuration - H3C S3100 Series Operation Manual

3

HABP Configuration

Introduction to HABP

With 802.1x enabled, a switch authenticates and then authorizes 802.1x-enabled ports. Packets can be
forwarded only by authorized ports. For ports with switches attached and are not authenticated and
authorized by 802.1x, their received packets will be filtered. This means that you cannot manage the
attached switches. Huawei authentication bypass protocol (HABP) is designed to address this problem.
An HABP packet carries the MAC addresses of the attached switches with it. It can bypass the 802.1x
authentications when traveling between HABP-enabled switches, through which management devices
can obtain the MAC addresses of the attached switches and thus the management of the attached
switches is feasible.
HABP is implemented by HABP server and HABP client. Normally, an HABP server sends HABP
request packets regularly to HABP clients to collect the MAC addresses of the attached switches. HABP
clients respond to the HABP request packets and forward the HABP request packets to lower-level
switches. HABP servers usually reside on management devices and HABP clients usually on attached
switches.
For ease of switch management, it is recommended that you enable HABP for 802.1x-enabled
switches.

HABP Server Configuration

With the HABP server launched, a management device sends HABP request packets regularly to the
attached switches to collect their MAC addresses. You need also to configure the interval on the
management device for an HABP server to send HABP request packets.
Table 3-1 Configure an HABP server
Operation
Enter system view
Enable HABP
Configure the current switch to
be an HABP server
Configure the interval to send
HABP request packets.
Command
system-view
habp enable
habp server vlan vlan-id
habp timer interval
3-1
Remarks
—
Optional
By default, HABP is enabled.
Required
By default, a switch operates as an
HABP client after you enable HABP
on the switch. If you want to use the
switch as a management switch, you
need to configure the switch to be an
HABP server.
Optional
The default interval for an HABP
server to send HABP request
packets is 20 seconds.