i
Table of Contents
1 802.1x Configuration·································································································································1-1
Introduction to 802.1x······························································································································1-1
Architecture of 802.1x Authentication······························································································1-1
The Mechanism of an 802.1x Authentication System·····································································1-2
Encapsulation of EAPoL Messages ································································································1-3
802.1x Authentication Procedure ····································································································1-5
Timers Used in 802.1x·····················································································································1-8
802.1x Implementation on an S3100 Series Switch········································································1-9
Introduction to 802.1x Configuration·····································································································1-13
Basic 802.1x Configuration···················································································································1-14
Configuration Prerequisites···········································································································1-14
Configuring Basic 802.1x Functions······························································································1-14
Timer and Maximum User Number Configuration·········································································1-16
Advanced 802.1x Configuration············································································································1-17
Specifying a Mandatory Authentication Domain for a Port····························································1-17
Configuring Proxy Checking··········································································································1-19
Configuring Client Version Checking·····························································································1-19
Enabling DHCP-triggered Authentication······················································································1-20
Enabling the Unicast Trigger Function for 802.1X Authentication ················································1-20
Configuring Guest VLAN···············································································································1-21
Configuring Auth-Fail VLAN for 802.1X Authentication·································································1-21
Configuring 802.1x Re-Authentication···························································································1-22
Configuring the 802.1x Re-Authentication Timer ··········································································1-22
Displaying and Debugging 802.1x········································································································1-23
Configuration Example··························································································································1-23
802.1x Configuration Example ······································································································1-23
802.1X Mandatory Authentication Domain Configuration Example··············································1-26
2 Quick EAD Deployment Configuration····································································································2-1
Introduction to Quick EAD Deployment ··································································································2-1
Quick EAD Deployment Overview···································································································2-1
Operation of Quick EAD Deployment······························································································2-1
Configuring Quick EAD Deployment·······································································································2-2
Configuration Prerequisites·············································································································2-2
Configuration Procedure··················································································································2-2
Displaying and Maintaining Quick EAD Deployment ······································································2-3
Quick EAD Deployment Configuration Examples···················································································2-3
Troubleshooting ······································································································································2-5
3 HABP Configuration··································································································································3-1
Introduction to HABP·······························································································································3-1
HABP Server Configuration ····················································································································3-1
HABP Client Configuration······················································································································3-2
Displaying HABP·····································································································································3-2