112
[Device] dot1x url http://192.168.2.3
# Enable 802.1X globally.
[Device] dot1x
# Enable 802.1X on the port.
[Device] interface ethernet 1/1
[Device-Ethernet1/1] dot1x
Verifying the configuration
Use the display dot1x command to display the 802.1X configuration. After the host obtains an IP
address from a DHCP server, use the ping command from the host to ping an IP address on the
network segment specified by free IP.
C:\>ping 192.168.2.3
Pinging 192.168.2.3 with 32 bytes of data:
Reply from 192.168.2.3: bytes=32 time<1ms TTL=128
Reply from 192.168.2.3: bytes=32 time<1ms TTL=128
Reply from 192.168.2.3: bytes=32 time<1ms TTL=128
Reply from 192.168.2.3: bytes=32 time<1ms TTL=128
Ping statistics for 192.168.2.3:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms
The output shows that you can access that segment before passing 802.1X authentication. If you
use a web browser to access any external website beyond the free IP segments, you are redirected
to the web server, which provides the 802.1X client software download service. Enter the external
website address in dotted decimal notation, for example, 3.3.3.3 or http://3.3.3.3, in the address bar.
Troubleshooting EAD fast deployment
Web browser users cannot be correctly redirected
Symptom
Unauthenticated users are not redirected to the specified redirect URL after they enter external
website addresses in their web browsers.
Analysis
Redirection will not happen for one of the following reasons:
• The address is in the string format. The operating system of the host regards the string as a
website name and tries to resolve it. If the resolution fails, the operating system sends an ARP
request, but the target address is not in the dotted decimal notation. The redirection function
does redirect this kind of ARP request.
• The address is within a free IP segment. No redirection will take place, even if no host is present
with the address.
• The redirect URL is not in a free IP segment, no server is using the redirect URL, or the server
with the URL does not provide web services.
To Next Page
Loading...
Need help?
General
