Basic 802.1X Configuration; Configuring Basic 802.1X Functions - Huawei Quidway S3900 Series Operation Manual

Operation Manual – 802.1x
Quidway S3900 Series Ethernet Switches-Release 1510
If you specify to use the RADIUS scheme, that is to say the supplicant systems are
authenticated by a remote RADIUS server, you need to configure the related user
names and passwords on the RADIUS server and perform RADIUS client-related
configuration on the switches.
If you specify to adopt a local authentication scheme, you need to configure user
names and passwords manually on the switches. Users can pass the
authentication through 802.1x client if they provide the user names and passwords
that match with those stored in the switches.
You can also specify to adopt RADIUS authentication scheme, with a local
authentication scheme as a backup. In this case, the local authentication scheme
is adopted when the RADIUS server fails.
Refer to the AAA&RADIUS&RADIUS&HWTACACS&EAD Operation Manual for
detailed information about AAA configuration.

1.3 Basic 802.1x Configuration

To utilize 802.1x features, you need to perform basic 802.1x configuration.
1.3.1 Prerequisites
Configure ISP domain and its AAA scheme, specify the authentication scheme
( RADIUS or a local scheme) .
Ensure that the service type is configured as lan-access (by using the
service-type command) for local authentication scheme.

1.3.2 Configuring Basic 802.1x Functions

Table 1-1 Configure basic 802.1x functions
Operation
Enter system view
Enable
globally
Enable 802.1x for
specified ports
Command
system-view
802.1x
dot1x
Use the following command
in system view:
dot1x [
interface-list ]
Use the following command
in port view:
dot1x
Huawei Technologies Proprietary
1-13
Chapter 1 802.1x Configuration
Description
—
Required
By default, 802.1x is disabled
globally.
interface
Required
By default, 802.1x is disabled
for all ports.