Advanced 802.1X Configuration; Configuring Proxy Checking - Huawei Quidway S3900 Series Operation Manual

Operation Manual – 802.1x
Quidway S3900 Series Ethernet Switches-Release 1510

1.5 Advanced 802.1x Configuration

Advanced 802.1x configurations, as listed below, are all optional.
CAMS cooperation configuration, including multiple network adapters detecting,
proxy detecting, and so on.
Client version checking configuration
DHCP –triggered authentication
Guest VLAN configuration
1.5.1 Prerequisites
Configuration of basic 802.1x

1.5.2 Configuring Proxy Checking

This function needs the support of 802.1x client program and CAMS, as listed below.
The 802.1x clients must be able to check whether multiple network cards, proxy
servers, or IE proxy servers are used on the user devices.
On CAMS, enable the function that forbids clients from using multiple network
cards, a proxy server, or an IE proxy.
By default, the use of multiple network cards, proxy server, and IE proxy are allowed on
802.1x client. If you specify CAMS to disable use of multiple network cards, proxy
server, and IE proxy, CAMS sends messages to 802.1x client to request the latter to
disable the use of multiple network cards, proxy server, and IE proxy when a user
passes the authentication.
Table 1-3 Configure user proxy checking
Operation
Enter system view
Enable
checking function
Enable proxy checking
for a port
system-view
dot1x
global proxy
supp-proxy-check
{ logoff | trap }
In system view:
dot1x
{ logoff | trap } [ interface
interface-list ]
In port view:
dot1x
{ logoff | trap }
Huawei Technologies Proprietary
Command
supp-proxy-check
supp-proxy-check
1-16
Chapter 1 802.1x Configuration
Description
—
Required
By default, the
802.1X proxy checking is
disabled.
Required
By default, the 802.1X
proxy checking is disabled
for the port.
global