3Com 5500-EI PWR - Configuring 802.1 X Re-Authentication; Configuring Guest VLAN; Enabling DHCP-Triggered Authentication

1-18
Enabling DHCP-triggered Authentication
After performing the following configuration, 802.1x allows running DHCP on access users, and users
are authenticated when they apply for dynamic IP addresses through DHCP.
Follow these steps to enable DHCP-triggered authentication:
To do... Use the command... Remarks
Enter system view
system-view
—
Enable DHCP-triggered
authentication
dot1x dhcp-launch
Required
By default, DHCP-triggered
authentication is disabled.
Configuring Guest VLAN
Follow these steps to configure guest VLAN:
To do... Use the command... Remarks
Enter system view
system-view
—
Configure the access control
method of ports
dot1x port-method portbased
Required
The default access control
method on a port is
MAC-based. That is, the
macbased keyword is used by
default.
In system
view
dot1x guest-vlan vlan-id
[ interface interface-list ]
interface interface-type
interface-number
dot1x guest-vlan vlan-id
Enable the
guest VLAN
function
In port view
quit
Required
By default, the guest VLAN
function is disabled.
Caution:
z The guest VLAN function is available only when the switch operates in the port-based access
control mode.
z Only one guest VLAN can be configured for each switch.
z The guest VLAN function cannot be implemented if you configure the dot1x dhcp-launch
command on the switch to enable DHCP-triggered authentication. This is because the switch does
not send authentication packets in that case.
Configuring 802.1x Re-Authentication
Follow these steps to enable 802.1x re-authentication: