207
addresses of all the clients, it registers the MAC addresses as HABP entries. Then, link layer frames
exchanged between the clients can bypass the 802.1X authentication on ports of the server without
affecting the normal operation of the whole network. All HABP packets must travel in a specific VLAN.
Communication between the HABP server and HABP clients is implemented through this VLAN.
CAUTION:
• In a cluster, if a member device with 802.1X authentication or MAC authentication enabled is attached
with some other member devices of the cluster, you also need to configure HABP server on this device.
Otherwise, the cluster management device will not be able to manage the devices attached to this
member device.
• For more information about the cluster function, see the
Network Management and Monitoring
Configuration Guide
.
Configuring HABP
Complete the following tasks to configure HABP:
• Configuring the HABP server
• Configuring an HABP client
Configuring the HABP server
HABP server is usually configured on the authentication device enabled with 802.1X authentication or
MAC address authentication. The HABP server sends HABP requests to the attached switches (HABP
clients) at a specific interval, collecting their MAC addresses from the responses. HABP packets are
transmitted in the VLAN specified on the HABP server.
Follow these steps to configure an HABP server:
To do… Use the command… Remarks
Enter system view system-view —
Enable HABP habp enable
Optional
Enabled by default
Configure HABP to work in server
mode and specify the VLAN for
HABP packets
habp server vlan vlan-id
Required
HABP works in client mode by
default.
Set the interval to send HABP
requests
habp timer interval
Optional
20 seconds by default
NOTE:
The VLAN specified on the HABP server for transmittin
HABP packets must be the same as that to which
the HABP clients belong.
Configuring an HABP client
HABP client is usually configured on each device attached to the authentication device. After receiving
an HABP request from the HABP server, an HABP client responds to the request, delivering its MAC
To Next Page
Loading...
