3com 2928 Betriebsanweisung
1-28
Perform the following configurations as shown in
z
Select GigabitEthernet1/0/1 from the port list.
z
Click Apply to finish the operation.
Configuration verification
# After the user passes authentication and gets online, use the ping command to test whether ACL
3000 takes effect.
3000 takes effect.
z
From the navigation tree, select Network > Diagnostic Tools. The ping page appears.
z
Enter the destination IP address 10.0.0.1.
z
Click Start to start the ping operation.
z
shows the ping operation summary.
Figure 1-36
Ping operation summary
Configuration Guidelines
When configuring 802.1X, note that:
1) 802.1X configuration on a specific port can take effect only after both global 802.1X and 802.1X on
1) 802.1X configuration on a specific port can take effect only after both global 802.1X and 802.1X on
the specific port are enabled.
2) Do not change the timer parameters of global 802.1X from their default values unless you have
determined that the changes would better the interaction process in some special network
environment.
environment.
3) A port enabled with 802.1X cannot be added to an aggregation group. Meanwhile, it is prohibited to
enable 802.1X on a port that belongs to an aggregation group.
4) For an 802.1X client using Extensible Authentication Protocol (EAP) authentication, the device
directly encapsulates contents from the client and sends them to the authentication server. In this
scenario, the configuration on username format on the device does not take effect. For details
about username format configuration, refer to RADIUS Configuration.
scenario, the configuration on username format on the device does not take effect. For details
about username format configuration, refer to RADIUS Configuration.
5) The Voice VLAN and 802.1X functions are mutually exclusive on an access port if the connected
client sends untagged traffic.