Configuring Client Version Checking; Enabling Dhcp-Triggered Authentication - H3C S7500 Series Operation Manual

Operation Manual – 802.1x
H3C S7500 Series Ethernet Switches
Note:
The proxy detection function needs the support of H3C's 802.1x client program.
The proxy detection function should be enabled on both the 802.1x client program
and CAMS. The client version checking should be enabled on the switch (by using
the dot1x version-check command).

1.5.3 Configuring Client Version Checking

Table 1-4 Configure client version checking
Enter system view
Enable 802.1x client
version checking
Configure the maximum
number of retry times to
send a version checking
request packet
Configure the ver-period
timer
Note:
As for the dot1x version-user command, if you execute it in system view without
specifying the interface-list argument, the command applies to all ports. You can also
use this command in port view. In this case, this command applies to the current port
only and the interface-list argument is not needed.

1.5.4 Enabling DHCP-triggered Authentication

With the following configuration, 802.1X allows the authenticator system to
authenticate the identity of an access user when the user runs DHCP to apply an IP
address dynamically.
To do...
system-view
dot1x version-check
[ interface interface-list ]
dot1x retry-version-max
max-retry-version-value
dot1x timer ver-period
ver-period-value
Use the command...
1-17
Chapter 1 802.1x Configuration
Remarks
—
Required
Disabled by default
Optional
3 by default
Optional
The default
ver-period-value is 30
seconds