3Com Switch 7750 Configuration Guide Guide

Advanced 802.1x Configuration 475
Configuring Client
Version Checking
n
As for the dot1x version-user command, if you execute it in system view without
specifying the interface-list argument, the command applies to all ports. You can
also use this command in port view. In this case, this command applies to the
current port only and the interface-list argument is not needed.
Enabling
DHCP-triggered
Authentication
After performing the following configuration, 802.1X allows running DHCP on
access users, and triggers authentication when the user dynamically applies IP
address.
Configuring Guest VLAN
c
CAUTION:
■ The Guest VLAN function is available only when the switch operates in a
port-based authentication mode.
■ Only one Guest VLAN can be configured for each switch.
Table 363 Configure client version checking
Operation Command Description
Enter system view system-view -
Enable 802.1x client version
checking
dot1x version-check [
interface interface-list ]
Required
By default, 802.1x client
version checking is disabled
on a port.
Configure the maximum
number of retires to send
version checking request
packets
dot1x retry-version-max
max-retry-version-value
Optional
Defaults to 3.
Configure the
client-version-checking period
timer
dot1x timer ver-period
ver-period-value
Optional
The default ver-period-value is
30 seconds
Table 364 Enable DHCP-triggered authentication
Operation Command Description
Enter system view system-view -
Enable DHCP-triggered
authentication
dot1x dhcp-launch
Optional
By default, DHCP-triggered
authentication is disabled.
Table 365 Configure Guest VLAN
Operation Command Description
Enter system view system-view -
Configure port access method
dot1x port-method {
macbased | portbased }
Optional
The default port access
method is
MAC-address-based. That is,
the macbased keyword is
used by default.
Enable the Guest VLAN
function
dot1x guest-vlan vlan-id [
interface interface-list ]
Required
By default, the Guest VLAN
function is disabled.