3Com S7902E Command Reference Manual - page 1822
1-6
eap
: Authenticates supplicants using EAP.
pap
: Authenticates supplicants using PAP.
Description
Use the
dot1x authentication-method
command to set the 802.1X authentication method.
Use the
undo dot1x authentication-method
command to restore the default.
By default, CHAP is used.
z
The password authentication protocol (PAP) transports passwords in clear text.
z
The challenge handshake authentication protocol (CHAP) transports only usernames over the
network. Compared with PAP, CHAP provides better security.
z
With EAP relay authentication, the authenticator encapsulates 802.1X user information in the EAP
attributes of RADIUS packets and sends the packets to the RADIUS server for authentication; it
does not need to repackage the EAP packets into standard RADIUS packets for authentication. In
this case, you can configure the
user-name-format
command but it does not take effect. For
information about the
user-name-format
command, refer to
AAA Commands
in the
Security
Volume
.
Note that:
z
Local authentication supports PAP and CHAP.
z
For RADIUS authentication, the RADIUS server must be configured accordingly to support PAP,
CHAP, or EAP authentication.
Related commands:
display dot1x
.
Examples
# Set the 802.1X authentication method to PAP.
[Sysname] dot1x authentication-method pap
dot1x guest-vlan
Syntax
In system view:
dot1x guest-vlan vlan-id
[
interface
interface-list
]
undo dot1x guest-vlan
[
interface
interface-list
]
In interface view:
dot1x guest-vlan guest-vlan-id
undo dot1x guest-vlan
View
System view, Layer 2 Ethernet interface view
Default Level
2: System level