3com S7906E Instruccion De Instalación
2-2
Currently, MAC authentication and port security cannot work together with EAD fast deployment. Once
MAC authentication or port security is enabled globally, the EAD fast deployment is disabled
automatically.
Configuration Prerequisites
z
Enable 802.1X globally.
z
Enable 802.1X on the specified port, and set the port authorization mode to auto.
Configuration Procedure
Configuring a freely accessible network segment
A freely accessible network segment, also called a free IP, is a network segment that users can access
before passing 802.1X authentication.
Once a free IP is configured, the fast deployment of EAD is enabled.
Follow these steps to configure a freely accessible network segment:
To do…
Use the command…
Remarks
Enter system view
system-view
—
Configure a freely accessible
network segment
network segment
dot1x free-ip ip-address
{ mask-address | mask-length }
{ mask-address | mask-length }
Required
No freely accessible network
segment is configured by
default.
segment is configured by
default.
z
You cannot configure both the free IP and the 802.1X guest VLAN function on a port.
z
If no freely accessible network segment is configured, a user cannot obtain a dynamic IP address
before passing 802.1X authentication. To solve this problem, you can configure a freely accessible
network segment that is on the same network segment with the DHCP server.
Configuring the IE redirect URL
Follow these steps to configure the IE redirect URL:
To do…
Use the command…
Remarks
Enter system view
system-view
—