Command Manual - Security
Quidway S6500 Series Ethernet Switches Chapter 1 802.1x Configuration Commands
Huawei Technologies Proprietary
1-13
trap: Sends trap message upon detecting a user using proxy to access the switch.
interface interface-list: Ethernet interface list including several Ethernet interfaces,
expressed in the format interface-list = { interface-num [ to interface-num ] } & < 1-10 >.
interface-num specifies a single Ethernet interface in the format interface-num =
{ interface-type interface-num | interface-name }, where interface-type specifies the
interface type, interface-num specifies the interface number and interface-name
specifies the interface name. For the respective meanings and value ranges, read the
Parameter of the Port Command Manual section.
Description
Using dot1x supp-proxy-check command, you can configure the control method for
802.1x access users via proxy logon the specified interface. Using undo dot1x
supp-proxy-check command, you can cancel the control method set for the 802.1x
access users via proxy.
Note that when performing this function, the user logging on via proxy need to run
Huawei 802.1x client program,( Huawei 802.1x client program version V1.29 or above
is needed).
This command is used to set on the specified interface when executed in system view.
The parameter interface-list cannot be input when the command is executed in
Ethernet Port view and it has effect only on the current interface. After globally enabling
proxy user detection and control in system view, only if you enable this feature on a
specific port can this configuration take effects on the port.
For the related command, see display dot1x.
Example
# Configure the switch cut network connection to a user upon detecting the use of proxy
on Ethernet 3/0/1 ~ Ethernet 3/0/8.
[Quidway] dot1x supp-proxy-check logoff
[Quidway] dot1x supp-proxy-check logoff interface Ethernet 3/0/1 to Ethernet 3/0/8
# Configure the switch to send trap message upon detecting the use of proxy on
Ethernet 3/0/9.
[Quidway] dot1x supp-proxy-check trap
[Quidway] dot1x supp-proxy-check trap interface Ethernet 3/0/9
or
[Quidway] dot1x supp-proxy-check trap
[Quidway] interface Ethernet 3/0/9
[Quidway-Ethernet3/0/9] dot1x supp-proxy-check trap