IEEE 802.1x 269
Checking the Users that Log on the Switch by Proxy
The following commands are used for checking the users that log on by proxy.
Perform the following configurations in system view or Ethernet port view.
Setting Number of Users on a Port
The following commands are used for setting the number of users allowed by
802.1x on a specified port. When no port is specified, all the ports accept the
same number of users.
Perform the following configurations in system view or Ethernet port view.
By default, 802.1x allows up to 2048 supplicants on each port for Switch 8800
Enabling DHCP to Launch Authentication
When the user runs DHCP and applies for dynamic IP addresses, use the following
commands to set whether or not 802.1x will enable the Ethernet switch to launch
the user ID authentication.
Perform the following configurations in system view.
By default, authentication will not be launched when the user runs DHCP and
applies for dynamic IP addresses.
Configuring the Authentication Method for 802.1x Users
The following commands can be used to configure the authentication method for
802.1x users. Three kinds methods of authentication are available:
■ PAP — the Remote Authentication Dial-In User Service (RADIUS) server must
support this method
■ CHAP — the RADIUS server must support this method
Table 4 Check the Users that Log on the Switch by Proxy
Operation Command
Enable the check for access users by proxy dot1x supp-proxy-check {logoff | trap}
[interface interface-list]
Cancel the check for access users by proxy undo dot1x supp-proxy-check {logoff |
trap} [interface interface-list]
Table 5 Set Maximum Number of Users by Specified Port
Operation Command
Set maximum number of users by specified
port
dot1x max-user user-number [interface
interface-list]
Restore the maximum number of users on the
port to the default value
undo dot1x max-user [interface
interface-list]
Table 6 Set to Enable DHCP to Launch Authentication
Operation Command
Enable DHCP to launch authentication dot1x dhcp-launch
Disable DHCP to launch authentication undo dot1x dhcp-launch