H3C S7500 Series Ethernet Switches Command Manual

Command Manual – 802.1x
H3C S7500 Series Ethernet Switches Chapter 1
802.1x Configuration Commands
1-6
System View: return to User View with Ctrl+Z.
[H3C] dot1x
1.1.3 dot1x authentication-method
Syntax
dot1x authentication-method { chap | pap | eap }
undo dot1x authentication-method
View
System view
Parameters
chap: Uses CHAP authentication.
pap: Uses PAP authentication.
eap: Uses EAP authentication.
Description
Use the dot1x authentication-method command to set an 802.1x authentication
method.
Use the undo dot1x authentication-method command to restore the default.
By default, CHAP authentication is used.
PAP uses a two-way handshaking process that transfers password in plain text format.
CHAP uses a three-way handshaking process that transfers only user names over the
network, not passwords. Therefore this method is safer and more confidential.
EAP authentication means that a switch sends 802.1x authentication information
directly to the RADIUS server in EAP packets, without the need to convert them into
RADIUS packets in advance. EAP authentication is the prerequisite of implementing
one of the three authentication methods: PEAP, EAP-TLS, and EAP-MD5.
Note that the implementation of PAP, CHAP or EAP authentication needs the support of
the RADIUS server.
Related commands: display dot1x.
Examples
# Specify the authentication method for 802.1x users to be PAP.
<H3C>system-view
System View: return to User View with Ctrl+Z.
[H3C] dot1x authentication-method pap