Huawei S1700 Series - Global

S1700 Managed Series Ethernet Switches
Web User Manual
9 Security
Issue 05 (2012-10-25)
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
124
device are connected, as long as only one device on this network segment passes the
authentication, all the devices can access the switch through this interface. Obviously, the
control method is susceptible to attacks.
MAC Address-based Access Control
To take full advantage of 802.1X authentication, it is necessary to create a logical interface for
the connected device accessing the switch. The switch takes the shared network segment
connecting to the logical interface as a serial of the logical interfaces to handle, and each
interface must be solely authenticated and authorized by the authentication server. The switch
learns MAC address of each connected device, and creates a logical interface, so that the
connected device can communicate with the switch through the logical interface.
9.2.1 Global
Click Security >802.1X>Global to configure global authentication parameters of IEEE802.1X,
the configuration page is shown as follows.
Figure 9-5 802.1X Global Settings
Table 9-4 Parameters of 802.1X Global Settings
Item
Description
802.1X State
Enable or Disable 802.1X globally(Default:Disable)
Handshake State
Enable Handshake State
Max User
The maximum number of hosts that can pass the 802.1X allowed by
switch (Range: 1-256; Default: 256).
Enable Global 802.1X
Step 1 Click Security>802.1X.
Step 2 Click Global Settings in tab bar.
Step 3 Enable "802.1X State”.
Step 4 Click Apply to apply all the changes made.
----End