Switch 7700 Command reference Guide, v2.0

802.1x Configuration Commands 351
Related commands: display dot1x.
Example
Enable 802.1x on Ethernet 1/0/1.
[SW7700]dot1x interface ethernet 1/0/1
Enable the 802.1x globally.
[SW7700]dot1x
dot1x
authentication-method
Syntax
dot1x authentication-method { chap | pap | eap md5-challenge }
undo dot1x authentication-method
View
System view
Parameter
Chap: Use CHAP authentication method.
Pap: Use PAP authentication method.
EAP: Use EAP authentication method. By now, only md5 encryption method is
available
Description
■ Use the dot1x authentication-method command to configure the
authentication method for 802.1x user.
■ Use the undo dot1x authentication-method command to restore the default
authentication method of 802.1x user.
By default, CHAP authentication is used for 802.1x user authentication.
Password Authentication Protocol (PAP) is a kind of authentication protocol with
two handshakes. It sends password in the form of simple text.
Challenge Handshake Authentication Protocol (CHAP) is a kind of authentication
protocol with three handshakes. It only transmits username but not password.
CHAP is more secure and reliable.
In the process of EAP authentication, switch directly sends authentication
information of 802.1x user to RADIUS server in the form of EAP packet. It is not
necessary to transfer the EAP packet to standard RADIUS packet first and then
send it to RADIUS server.
To realize PAP, CHAP or EAP authentication, RADIUS server should support PAP,
CHAP or EAP authentication respectively.
Related command: display dot1x.