3com S7906E Guide De Référence

 

1-6 

eap: Authenticates supplicants using EAP. 

pap: Authenticates supplicants using PAP. 

Use the dot1x authentication-method command to set the 802.1X authentication method. 

Use the undo dot1x authentication-method command to restore the default. 

By default, CHAP is used. 

z 

The password authentication protocol (PAP) transports passwords in clear text.  

z 

The challenge handshake authentication protocol (CHAP) transports only usernames over the 

network. Compared with PAP, CHAP provides better security. 

z 

With EAP relay authentication, the authenticator encapsulates 802.1X user information in the EAP 

attributes of RADIUS packets and sends the packets to the RADIUS server for authentication; it 

does not need to repackage the EAP packets into standard RADIUS packets for authentication. In 

this case, you can configure the user-name-format command but it does not take effect. For 

information about the user-name-format command, refer to AAA Commands in the Security 

Volume. 

Note that:  

z 

Local authentication supports PAP and CHAP.  

z 

For RADIUS authentication, the RADIUS server must be configured accordingly to support PAP, 

CHAP, or EAP authentication. 

Related commands: display dot1x. 

# Set the 802.1X authentication method to PAP. 

<Sysname> system-view 

[Sysname] dot1x authentication-method pap 

In system view: 

dot1x guest-vlan vlan-id [ interface interface-list ] 

undo dot1x guest-vlan [ interface interface-list ] 

In interface view: 

dot1x guest-vlan guest-vlan-id 

undo dot1x guest-vlan 

System view, Layer 2 Ethernet interface view 

2: System level