Operation Manual – 802.1x
Quidway S5600 Series Ethernet Switches-Release 1510 Chapter 1
802.1x Configuration
Huawei Technologies Proprietary
1-11
z Whether or not a supplicant system logs in through more than one network cards
(that is, whether or not more than one network adapters are active in a supplicant
system when the supplicant system logs in).
In response to any of the three cases, a switch can optionally take the following
measures:
z Disconnect the supplicant system and send Trap packets (achieved via the dot1x
supp-proxy-check logoff command.)
z Send Trap packets without disconnecting the supplicant system (achieved via the
dot1x supp-proxy-check trap command.)
This function needs the support of 802.1x clients and CAMS:
z The 802.1x clients are capable of detecting multi-network adapter, proxies, and IE
proxies.
z CAMS is configured to disable the use of multiple network adapters, proxies, or IE
proxies.
By default, an 802.1x client program allows use of multiple network adapters, a proxy
server, and an IE proxy server. If CAMS is configured to disable use of multiple network
adapters, proxies, or IE proxies, it prompts the 802.1x client to disable use of multiple
network adapters, proxies, or IE proxies through messages after the supplicant system
passes the authentication.
Note:
z The client-checking function needs the support of Huawei’s 802.1x client program.
z The proxy detecting function should be enabled on both the 802.1x client program
and CAMS. The client version detecting should be enabled on the switch (achieved
via the dot1x version-check command).
II. Chekcing the client version
With the 802.1x client-version-checking function enabled, a switch will check the
version and validity of an 802.1x client to prevent unauthorized users or users with
earlier versions of 802.1x from logging in.
This function makes the switch to send version-requesting packets again if the 802.1x
client fails to send version-reply packet to the switch before the version-checking timer
times out.
To Next Page
Loading...
