H3C S7500 Series Ethernet Switches Release 3135 DHCP Configuration Examples

802.1x Configuration Examples
H3C S7500 Series Ethernet Switches Release 3135 Chapter 2 802.1X Configuration Commands
2-1
Chapter 2 802.1X Configuration Commands
To implement 802.1x, you need to configure the supplicant system (client),
authenticator system (switch) and authentication/authorization server correctly.
z Supplicant system: Ensures that the PC uses a right client.
z Authenticator system: Configuring 802.1x and AAA on the authenticator system is
required.
z Authentication/authorization server: Configuring the authentication/authorization
server correctly is required.
The following table shows 802.1x configuration commands necessary for configuring
the switch (authenticator system). For configuration information on other devices, refer
to related manuals.
Table 2-1 802.1x configuration commands
To do… Use the command… Remarks
Enter system view
system-view
—
Enable 802.1x
globally
dot1x
Required
Disabled by default
In system view
dot1x [ interface
interface-list ]
Enable 802.1x for
one or more ports
In port view
dot1x
Required
Disabled on a port by default
802.1x must be enabled
both globally in system view
and on the intended port in
system view or port view.
Otherwise, it does not
function.
In system view:
dot1x port-method
{ macbased | portbased }
[ interface interface-list ]
Set a port access
control method for
the specified or all
ports
In port view:
dot1x port-method
{ macbased | portbased }
Optional
macbased by default
Port-based access control is
required for Guest VLAN.
In system view:
dot1x guest-vlan vlan-id
[ interface interface-list ]
Enable Guest VLAN
on the specified or all
ports
In port view:
dot1x guest-vlan vlan-id
Optional
Not enabled by default
The vlan-id of the Guest
VLAN must be created
beforehand.