H3C S3100 8C SI - Configuring Client Version Checking

Operation Manual – 802.1x-System Guard
H3C S3100 Series Ethernet Switches Chapter 1 802.1x Configuration
1-19
 Note:
z The proxy checking function needs the cooperation of H3C's 802.1x client (iNode)
program.
z The proxy checking function depends on the online user handshaking function. To
enable the proxy detecting function, you need to enable the online user
handshaking function first.
z The configuration listed in Table 1-3 takes effect only when it is performed on CAMS
as well as on the switch. In addition, the client version checking function needs to be
enabled on the switch too (by using the dot1x version-check command).
1.4.2 Configuring Client Version Checking
Table 1-4 Configure client version checking
Operation Command Remarks
Enter system view
system-view
—
In system
view
dot1x version-check
[ interface interface-list ]
interface interface-type
interface-number
dot1x version-check
Enable
802.1x
client
version
checking
In port
view
quit
Required
By default, 802.1x client
version checking is
disabled on a port.
Set the maximum
number of retires to
send version
checking request
packets
dot1x retry-version-max
max-retry-version-value
Optional
By default, the maximum
number of retires to send
version checking request
packets is 3.
Set the client version
checking period timer
dot1x timer ver-period
ver-period-value
Optional
By default, the timer is set
to 30 seconds.
 Note:
As for the dot1x version-user command, if you execute it in system view without
specifying the interface-list argument, the command applies to all ports. You can also
execute this command in port view. In this case, this command applies to the current
port only and the interface-list argument is not needed.