Huawei Quidway S5600 Series - Page 519

Operation Manual – 802.1x
Quidway S5600 Series Ethernet Switches-Release 1510 Chapter 1
802.1x Configuration
Huawei Technologies Proprietary
1-16
 Note:
z As for the dot1x max-user command, if you execute it in system view without
specifying the interface-list argument, the command applies to all ports. You can
also use this command in port view. In this case, this command applies to the
current port only and the interface-list argument is not needed.
z As for the configuration of 802.1x timers, the default values are recommended.
1.5 Advanced 802.1x Configuration
Advanced 802.1x configurations, as listed below, are all optional.
z CAMS cooperation configuration, including multiple network adapters detecting,
proxy detecting, and so on.
z Client version checking configuration
z DHCP –triggered authentication
z Guest VLAN configuration
1.5.1 Prerequisites
Configuration of basic 802.1x
1.5.2 Configuring Proxy Checking
This function needs the support of 802.1x client program and CAMS, as listed below.
z The 802.1x clients must be able to check whether multiple network cards, proxy
servers, or IE proxy servers are used on the user devices.
z On CAMS, enable the function that forbids clients from using multiple network
cards, a proxy server, or an IE proxy.
By default, the use of multiple network cards, proxy server, and IE proxy are allowed on
802.1x client. If you specify CAMS to disable use of multiple network cards, proxy
server, and IE proxy, CAMS sends messages to 802.1x client to request the latter to
disable the use of multiple network cards, proxy server, and IE proxy when a user
passes the authentication.
Table 1-3 Configure user proxy checking
Operation Command Description
Enter system view
system-view
—
Enable global proxy
checking function
dot1x
supp-proxy-check
{ logoff | trap }
Required
By default, the global
802.1X proxy checking is
disabled.