Enabling Dhcp-Triggered Authentication; Configuring Guest Vlan - H3C S3100-52P Operation Manual

Operation Manual – 802.1x and System Guard
H3C S3100-52P Ethernet switch
Note:
As for the dot1x version-user command, if you execute it in system view without
specifying the interface-list argument, the command applies to all ports. You can also
execute this command in port view. In this case, this command applies to the current
port only and the interface-list argument is not needed.

1.4.3 Enabling DHCP-triggered Authentication

After performing the following configuration, 802.1x allows running DHCP on access
users, and users are authenticated when they apply for dynamic IP addresses through
DHCP.
Follow these steps to enable DHCP-triggered authentication:
Enter system view
Enable DHCP-triggered
authentication

1.4.4 Configuring Guest VLAN

Follow these steps to configure guest VLAN:
Enter system view
Configure port access
method
Enable the
guest
VLAN
function
To do...
system-view
dot1x dhcp-launch
To do...
system-view
dot1x port-method
portbased
In system
dot1x guest-vlan vlan-id
view [ interface interface-list ]
interface interface-type
interface-number
In port view
dot1x guest-vlan vlan-id
quit
Use the command...
Use the command...
1-22
Chapter 1 802.1x Configuration
Remarks
—
Required
By default,
DHCP-triggered
authentication is disabled.
Remarks
—
Required
The default port access
method is
MAC-address-based.
That is, the macbased
keyword is used by
default.
Required
By default, the guest
VLAN function is disabled.