(Optional) Configuring the 802.1x Authentication Method

Procedure

• In the system view,
  1. Run system-view

     The system view is displayed.

  2. Run dot1x authentication-method { chap | pap | eap }

     The 802.1x authentication method is configured.

     By default, the 802.1x authentication method is CHAP.

     • Password Authentication Protocol (PAP) is a two-way handshake authentication protocol. It transmits passwords in plain text format in RADIUS packets. It is not recommended because of the low security.
     • Challenge Handshake Authentication Protocol (CHAP) is a three-way handshake authentication protocol. It transmits only user names but not passwords in RADIUS packets. CHAP is more secure and reliable than PAP. If higher security is required, CHAP is recommended.
     • Extensible Authentication Protocol (EAP) authentication: The device directly encapsulates the received EAP packets containing user authentication information into RADIUS packets and sends the RADIUS packets to the RADIUS server. This mechanism is also called EAP over RADIUS (EAPoR). To use the EAP-MD5 authentication, you only need to enable EAP authentication.

     PAP authentication and CHAP authentication are termination authentication methods and EAP authentication is a kind of relay authentication method.

  3. Run commit

     The configuration is committed.

• In the interface view,
  1. Run system-view

     The system view is displayed.

  2. Run interface interface-type interface-number

     The interface view is displayed.

  3. Run dot1x authentication-method { chap | pap | eap }

     The 802.1x authentication method is configured.

     By default, the 802.1x authentication method is CHAP.

  4. Run commit

     The configuration is committed.