802.1x Configuration Commands 345
enabled globally, if the parameters are not configured globally or for a specified
port, they will maintain the default values.
After the global 802.1x performance is enabled, only when port 802.1x
performance is enabled will the configuration of 802.1x become effective on the
port.
Related commands: display dot1x.
Example
To enable 802.1x on GigabitEthernet 1/0/1, enter the following.
<SW5500>system-view
System View: return to User View with Ctrl-Z
[SW5500]dot1x interface gigabitethernet 1/0/1
To enable 802.1x globally, enter the following.
[SW5500]dot1x
dot1x
authentication-method
Syntax
dot1x authentication-method { chap | pap | eap md5-challenge }
undo dot1x authentication-method
View
System View
Parameter
Chap: Use CHAP authentication method.
Pap: Use PAP authentication method.
eap: Use EAP authentication method. At present, only md5 encryption method is
available
Description
Use the dot1x authentication-method command to configure the
authentication method for the 802.1x user. Use the
undo dot1x
authentication-method
command to restore the default authentication method
of the 802.1x user.
By default, CHAP authentication is used for 802.1x user authentication.
Password Authentication Protocol (PAP) is a kind of authentication protocol with
two handshakes. It sends the password in the form of simple text.
Challenge Handshake Authentication Protocol (CHAP) is a kind of authentication
protocol with three handshakes. It only transmits the username, not the password.
CHAP is more secure and reliable.
In the process of EAP authentication, the Switch directly sends authentication
information of an 802.1x user to a RADIUS server in the form of anEAP packet. It is
To Next Page
Loading...
