H3C S5100-SI

1-19
To do... Use the command... Remarks
Set the client version
checking period timer
dot1x timer ver-period
ver-period-value
Optional
By default, the timer is set to
30 seconds.
As for the dot1x version-user command, if you execute it in system view without
specifying the interface-list argument, the command applies to all ports. You can also
execute this command in port view. In this case, this command applies to the current port
only and the interface-list argument is not needed.
Enabling DHCP-triggered Authentication
After performing the following configuration, 802.1x allows running DHCP on access users,
and users are authenticated when they apply for dynamic IP addresses through DHCP.
Follow these steps to enable DHCP-triggered authentication:
To do... Use the command... Remarks
Enter system view
system-view
—
Enable DHCP-triggered
authentication
dot1x dhcp-launch
Required
By default, DHCP-triggered
authentication is disabled.
Configuring Guest VLAN
Follow these steps to configure guest VLAN:
To do... Use the command... Remarks
Enter system view
system-view
—
Configure port access
method
dot1x port-method
portbased
Required
The default port access
method is
MAC-address-based. That
is, the macbased keyword
is used by default.
In system
view
dot1x guest-vlan vlan-id
[ interface interface-list ]
interface interface-type
interface-number
dot1x guest-vlan vlan-id
Enable the
guest VLAN
function
In port view
quit
Required
By default, the guest VLAN
function is disabled.