H3C S7500 Series Ethernet Switches Operation Manual

Operation Manual – 802.1x
H3C S7500 Series Ethernet Switches
Chapter 1 802.1x Configuration
1-16
1.5 Advanced 802.1x Configuration
Advanced 802.1x configurations, as listed below, are all optional.
z CAMS cooperation configuration, including detecting multiple network interface
cards or proxy server;
z Client version checking configuration;
z DHCP-triggered authentication;
z Guest VLAN configuration.
1.5.1 Prerequisites
Configuration of basic 802.1x
1.5.2 Configuring Proxy Detection
This function needs the support of 802.1x client program and CAMS, as listed below.
z The 802.1x clients must be able to check a supplicant system uses multiple
network cards, proxy server, or IE proxy server to log in.
z CAMS enables the function of disabling multiple network interface cards, proxy
server, or IE proxy server on the authenticator system.
By default, the 802.1x client disables the function of disabling multiple network interface
cards, proxy server, and IE proxy server. If you specify CAMS to enable the function,
CAMS will notify the 802.1x client that it should enable the function when a user passes
the authentication.
Table 1-3 Configure proxy detection
To do... Use the command... Remarks
Enter system view
system-view
—
Enable the proxy
detection function
dot1x supp-proxy-check { logoff |
trap }
Required
Disabled by default
In system view:
dot1x supp-proxy-check { logoff |
trap } [ interface interface-list ]
Enable proxy detection
for the specified ports
In port view:
dot1x supp-proxy-check { logoff |
trap }
Required
Disabled by default