130
When a SmartOn-enabled port receives an EAPOL-Start packet from an 802.1X client, it sends a unicast
EAP-Request/Notification packet to the client. The client will respond with an EAP-Response/Notification
packet, which contains the SmartOn switch ID and the MD5 digest of the SmartOn password. If the
SmartOn switch ID and MD5 digest in the packet match the SmartOn switch ID and MD5 digest on the
device, the device continues to perform 802.1X authentication for the client. Otherwise, the device denies
the client's 802.1X authentication request.
Examples
# Enable the SmartOn feature on port GigabitEthernet 2/1/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 2/1/1
[Sysname-GigabitEthernet2/1/1] dot1x smarton
Related commands
• display dot1x
• dot1x smarton switched
• dot1x smarton password
dot1x smarton password
Use dot1x smarton password to configure a SmartOn password.
Use undo dot1x smarton password to restore the default.
Syntax
dot1x smarton password { cipher cipher-string | simple plain-string }
undo dot1x smarton password
Default
No SmartOn password is configured.
Views
System view
Predefined user roles
network-admin
Parameters
cipher cipher-string: Sets a ciphertext password. The cipher-string argument is a case-sensitive string of 1
to 53 characters.
simple plain-string: Sets a plaintext password. The plain-string argument is a case-sensitive plaintext
string of 1 to 16 characters.
Usage guidelines
The device checks the MD5 digest of the SmartOn password in each received
EAP-Response/Notification packet. If the digest is not the same as the MD5 digest of the SmartOn
password on the device, the device stops the 802.1X authentication process for the client that sends this
packet.
For security purposes, all passwords, including passwords configured in plain text, are saved in
ciphertext.