No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

S1720, S2700, S3700, S5700, S6700, S7700, and S9700 Series Switches Common Operation Guide

This document describes the CLI-based configurations of universal protocols and common features for Huawei switches on basic networks.
Rate and give feedback :
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Configuring MAC Address Bypass Authentication

Configuring MAC Address Bypass Authentication

When there are PCs and a few dumb terminals (such as printers) on a network, you can configure 802.1X authentication and MAC address bypass authentication so that the dumb terminals can also connect to the 802.1X authentication network. For example, when many PCs and some dumb terminals are connected to the interfaces GE1/0/1 and GE1/0/5, you can enable 802.1X authentication and MAC address bypass authentication on the interfaces so that the PCs and dumb terminals can connect to the network.The following uses the configuration of GE1/0/1 as an example. The configuration of GE1/0/5 is similar to the configuration of GE1/0/1, and is not mentioned here.

Configuring MAC Address Bypass Authentication in Common Mode

  • Batch configure multiple interfaces in the system view:
    <HUAWEI> system-view
    [HUAWEI] dot1x enable
    [HUAWEI] dot1x enable interface gigabitethernet 1/0/1 gigabitethernet 1/0/5
    [HUAWEI] dot1x mac-bypass interface gigabitethernet 1/0/1 gigabitethernet 1/0/5
  • Configure each interface in the interface view:
    <HUAWEI> system-view
    [HUAWEI] dot1x enable
    [HUAWEI] interface gigabitethernet 1/0/1
    [HUAWEI-GigabitEthernet1/0/1] dot1x enable
    [HUAWEI-GigabitEthernet1/0/1] dot1x mac-bypass
    [HUAWEI-GigabitEthernet1/0/1] quit
    [HUAWEI] interface gigabitethernet 1/0/5
    [HUAWEI-GigabitEthernet1/0/5] dot1x enable
    [HUAWEI-GigabitEthernet1/0/5] dot1x mac-bypass

Configuring MAC Address Bypass Authentication in Unified Mode

  • For versions earlier than V200R009C00

    Configure both 802.1X authentication and MAC address configuration on the interface, and configure 802.1X authentication first.

    <HUAWEI> system-view
    [HUAWEI] interface gigabitethernet 1/0/1
    [HUAWEI-GigabitEthernet1/0/1] authentication dot1x mac-authen
    [HUAWEI-GigabitEthernet1/0/1] quit
  • For V200R009C00 and later versions

    Bind both the 802.1X access profile and MAC access profile to the authentication profile, configure the authentication dot1x-mac-bypass command, and then bind the authentication profile to the interface.

    <HUAWEI> system-view
    [HUAWEI] mac-access-profile name m1
    [HUAWEI-mac-access-profile-m1] quit
    [HUAWEI] dot1x-access-profile name d1
    [HUAWEI-dot1x-access-profile-d1] quit
    [HUAWEI] authentication-profile name p1
    [HUAWEI-authen-profile-p1] mac-access-profile m1
    [HUAWEI-authen-profile-p1] dot1x-access-profile d1
    [HUAWEI-authen-profile-p1] authentication dot1x-mac-bypass
    [HUAWEI-authen-profile-p1] quit
    [HUAWEI] interface gigabitethernet 1/0/1
    [HUAWEI-GigabitEthernet1/0/1] authentication-profile p1
    [HUAWEI-GigabitEthernet1/0/1] quit
Translation
Download
Updated: 2018-09-03

Document ID: EDOC1000057410

Views: 89715

Downloads: 12196

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next