Инструкции По Установке для 3com S7906E

Скачать
Страница из 2621
 
2-2 
 
Currently, MAC authentication and port security cannot work together with EAD fast deployment. Once 
MAC authentication or port security is enabled globally, the EAD fast deployment is disabled 
automatically. 
 
Configuration Prerequisites 
Enable 802.1X globally. 
Enable 802.1X on the specified port, and set the port authorization mode to auto
Configuration Procedure 
Configuring a freely accessible network segment 
A freely accessible network segment, also called a free IP, is a network segment that users can access 
before passing 802.1X authentication. 
Once a free IP is configured, the fast deployment of EAD is enabled. 
Follow these steps to configure a freely accessible network segment: 
To do… 
Use the command… 
Remarks 
Enter system view 
system-view 
— 
Configure a freely accessible 
network segment 
dot1x free-ip ip-address 
mask-address | mask-length }
Required 
No freely accessible network 
segment is configured by 
default. 
 
 
You cannot configure both the free IP and the 802.1X guest VLAN function on a port. 
If no freely accessible network segment is configured, a user cannot obtain a dynamic IP address 
before passing 802.1X authentication. To solve this problem, you can configure a freely accessible 
network segment that is on the same network segment with the DHCP server. 
 
Configuring the IE redirect URL 
Follow these steps to configure the IE redirect URL: 
To do… 
Use the command… 
Remarks 
Enter system view 
system-view 
—