H3C S3100 Series Operation Manual page 483

H3c s3100 series ethernet switches operation manual

Hide thumbs Also See for S3100 Series:

Table of Contents

# Set the MAC authentication timers.

[Switch] mac-authentication timer offline-detect 180

[Switch] mac-authentication timer quiet 180

# Specify the MAC authentication username format as MAC address, that is, using the MAC address

(with hyphens) of a user as the username and password for MAC authentication of the user.

[Switch] mac-authentication user-name-format mac-address with-hyphen

# Enable MAC authentication on Ethernet 1/0/1, and specify VLAN 2 as the Auth-Fail VLAN

[Switch–Ethernet1/0/1] mac-authentication

[Switch–Ethernet1/0/1] mac-authentication guest-vlan 2

[Switch–Ethernet1/0/1] quit

Configure 802.1X authentication

# Enable 802.1X authentication globally.

[Switch] dot1x

# Enable 802.1X authentication (MAC-based access control required) on Ethernet 1/0/1, and specify

VLAN 2 as the Auth-Fail VLAN.

[Switch] interface ethernet1/0/1

[Switch-Ethernet1/0/1] dot1x

[Switch-Ethernet1/0/1] dot1x port-method macbased

[Switch-Ethernet1/0/1] dot1x auth-fail vlan 2

Configure Web authentication and related parameters.

# Enable Web authentication globally.

[Switch] web-authentication web-server ip 100.1.1.1 port 8080

[Switch] web-authentication enable

# Enable Web authentication on Ethernet1/0/1, and set it to use VLAN 5 as its Auth-Fail VLAN.

[Switch-Ethernet1/0/1] web-authentication select method extended

[Switch-Ethernet1/0/1] web-authentication auth-fail vlan 5

Chapters

Table of Contents