3-13 HABP ConfigurationWhen configuring HABP, go to these sections for information you are interested in:z Introduction to HABPz HABP Server Configurationz HABP Client Configurationz Displaying and Maintaining HABP ConfigurationIntroduction to HABPWhen a switch is configured with the 802.1x function, 802.1x will authenticate and authorize802.1x-enabled ports and allow only the authorized ports to forward packets. In case a port fails 802.1xauthentication and authorization, service packets from and to that port will be blocked, making itimpossible to manage the switch attached to the port. The Huawei Authentication Bypass Protocol(HABP) aims at solving this problem.An HABP packet carries the MAC addresses of the attached switches with it. It can bypass the 802.1xauthentications when traveling between HABP-enabled switches, through which management devicescan obtain the MAC addresses of the attached switches and thus the management of the attachedswitches is feasible.HABP is built on the client-server model. Typically, the HABP server sends HABP requests to the clientperiodically to collect the MAC address(es) of the attached switch(es). The client responds to therequests, and forwards the HABP requests to the attached switch(es). The HABP server usually runs onthe administrative device while the HABP client runs on the attached switches.For ease of switch management, it is recommended that you enable HABP for 802.1x-enabledswitches.HABP Server ConfigurationWith the HABP server launched, a management device sends HABP request packets regularly to theattached switches to collect their MAC addresses. You need also to configure the interval on themanagement device for an HABP server to send HABP request packets.Follow these steps to configure an HABP server:To do... Use the command... RemarksEnter system view system-view —Enable HABP habp enable OptionalBy default, HABP is enabled.
