Configuring Client Version Checking; Enabling Dhcp-Triggered Authentication - Huawei Quidway S3900 Series Operation Manual

Operation Manual – 802.1x
Quidway S3900 Series Ethernet Switches-Release 1510
Note:
The proxy checking function needs the support of Huawei's 802.1x client program.
The configuration listed in Table 1-3 takes effect only when it is performed on CAMS
as well as on the switch and the client version checking function is enabled on the
switch (by the dot1x version-check command).

1.5.3 Configuring Client Version Checking

Table 1-4 Configure client version checking
Operation
Enter system view
Enable
client
checking
Configure
maximum number
of retires to send
version
request packets
Configure
client-version-chec
king period timer
Note:
As for the dot1x version-user command, if you execute it in system view without
specifying the interface-list argument, the command applies to all ports. You can also
use this command in port view. In this case, this command applies to the current port
only and the interface-list argument is not needed.

1.5.4 Enabling DHCP-triggered Authentication

After performing the following configuration, 802.1X allows running DHCP on access
users, and triggers authentication when the user dynamically applies IP address.
Command
system-view
802.1x
dot1x
version
[ interface interface-list ]
the
dot1x retry-version-max
max-retry-version-value
checking
the
dot1x timer
ver-period-value
Huawei Technologies Proprietary
—
Required
version-check
By
version checking is disabled
on a port.
Optional
Defaults to 3.
Optional
ver-period
The default ver-period-value
is 30 seconds
1-17
Chapter 1 802.1x Configuration
Description
default, 802.1x client