Global - Huawei S1700 Series Web User Manual

S1700 Managed Series Ethernet Switches
Web User Manual
device are connected, as long as only one device on this network segment passes the
authentication, all the devices can access the switch through this interface. Obviously, the
control method is susceptible to attacks.
MAC Address-based Access Control
To take full advantage of 802.1X authentication, it is necessary to create a logical interface for
the connected device accessing the switch. The switch takes the shared network segment
connecting to the logical interface as a serial of the logical interfaces to handle, and each
interface must be solely authenticated and authorized by the authentication server. The switch
learns MAC address of each connected device, and creates a logical interface, so that the
connected device can communicate with the switch through the logical interface.

9.2.1 Global

Click Security >802.1X>Global to configure global authentication parameters of IEEE802.1X,
the configuration page is shown as follows.
Figure 9-5 802.1X Global Settings
Table 9-4 Parameters of 802.1X Global Settings
Item
802.1X State
Handshake State
Max User
Enable Global 802.1X
Step 1 Click Security>802.1X.
Step 2 Click Global Settings in tab bar.
Step 3 Enable "802.1X State".
Step 4 Click Apply to apply all the changes made.
----End
Issue 05 (2012-10-25)
Description
Enable or Disable 802.1X globally(Default:Disable)
Enable Handshake State
The maximum number of hosts that can pass the 802.1X allowed by
switch (Range: 1-256; Default: 256).
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
9 Security
124