3com 4210 PWR 9-Port 3CR17341-91-ME ユーザーズマニュアル
製品コード
3CR17341-91-ME
226
C
HAPTER
17: 802.1
X
C
ONFIGURATION
■
As for the configuration of 802.1x timers, the default values are
recommended.
recommended.
Advanced 802.1x
Configuration
Configuration
Advanced 802.1x configurations, as listed below, are all optional.
■
Configuration concerning CAMS, including multiple network adapters
detecting, proxy detecting, and so on.
detecting, proxy detecting, and so on.
■
Client version checking configuration
■
DHCP-triggered authentication
■
Guest VLAN configuration
■
802.1x re-authentication configuration
■
Configuration of the 802.1x re-authentication timer
You need to configure basic 802.1x functions before configuring 802.1x features.
Configuring Proxy
Checking
n
■
The proxy checking function needs the cooperation of 3Com’s 802.1x client
(iNode) program.
(iNode) program.
■
The proxy checking function depends on the online user handshaking function.
To enable the proxy detecting function, you need to enable the online user
handshaking function first.
To enable the proxy detecting function, you need to enable the online user
handshaking function first.
■
The configuration listed in Table 164 takes effect only when it is performed on
CAMS as well as on the switch. In addition, the client version checking function
needs to be enabled on the switch too (by using the dot1x version-check
command).
CAMS as well as on the switch. In addition, the client version checking function
needs to be enabled on the switch too (by using the dot1x version-check
command).
Configuring Client
Version Checking
Table 164 Configure proxy checking
Operation
Command
Remarks
Enter system view
system-view
-
Enable proxy checking
function globally
function globally
dot1x supp-proxy-check {
logoff | trap }
logoff | trap }
Required
By default, the 802.1x proxy
checking function is globally
disabled.
checking function is globally
disabled.
Enable proxy
checking for
a
port/specified
ports
checking for
a
port/specified
ports
In system
view
view
dot1x supp-proxy-check {
logoff | trap } [ interface
interface-list ]
logoff | trap } [ interface
interface-list ]
Required
By default, the 802.1x proxy
checking is disabled on a port.
checking is disabled on a port.
In port view
interface interface-type
interface-number
interface-number
dot1x supp-proxy-check {
logoff | trap }
logoff | trap }
quit
Table 165 Configure client version checking
Operation
Command
Remarks
Enter system view
system-view
-