Setting The Maximum Times Of Authentication Request Message Retransmission - Huawei Quidway S3000-EI Series Operation Manual

Operation Manual - Security
Quidway S3000-EI Series Ethernet Switches
III. Configuration Procedure
Table 1-14 Configure 802.1x dynamic user binding
Enter system view
Enable 802.1x dynamic
user binding
Display
information
IV. 802.1x Dynamic User Binding Configuration Example
1) Network requirements
The 802.1x users obtain IP addresses dynamically.
Configure the switch to prevent 802.1x users from changing their IP addresses
after they pass the authentication.
2) Configuration procedure
# Enable 802.1x globally.
<Quidway> system-view
System View: return to User View with Ctrl+Z.
[Quidway] dot1x
# Enable 802.1x dynamic user binding.
[Quidway] dot1x dynamic-binding-user enable
# Enable DHCP Snooping globally. (Required for 802.1x users who obtain IP
addresses dynamically)
[Quidway] dhcp-snooping
# Configure Ethernet 0/1 port, which connects the DHCP server, to be a DHCP
Snooping trusted port. (Required for 802.1x users who obtain IP addresses
dynamically)
[Quidway] interface ethernet0/1
[Quidway-Ethernet0/1] dhcp-snooping trust
1.2.12 Setting the Maximum Times of Authentication Request Message
Retransmission
The following commands are used for setting the maximum retransmission times of the
authentication request message that the switch sends to the supplicant.
Perform the following configurations in system view.
Operation
system-view
dot1x
dynamic-binding-user
enable
display dot1x [ sessions
related
| statistics ] [ interface
interface-list ]
Huawei Technologies Proprietary
Command
1-12
Chapter 1 802.1x Configuration
Remarks
—
Required. 802.1x
dynamic user binding is
disabled by default.
The display command
can be executed in any
view.