Operation Manual – 802.1x and System GuardH3C S5100-SI/EI Series Ethernet Switches Chapter 3 HABP Configuration3-1Chapter 3 HABP ConfigurationWhen configuring HABP, go to these sections for information you are interested in:z Introduction to HABPz HABP Server Configurationz HABP Client Configurationz Displaying and Maintaining HABP Configuration3.1 Introduction to HABPWhen a switch is configured with the 802.1x function, 802.1x will authenticate andauthorize 802.1x-enabled ports and allow only the authorized ports to forward packets.In case a port fails 802.1x authentication and authorization, service packets from and tothat port will be blocked, making it impossible to manage the switch attached to the port.The Huawei Authentication Bypass Protocol (HABP) aims at solving this problem.An HABP packet carries the MAC addresses of the attached switches with it. It canbypass the 802.1x authentications when traveling between HABP-enabled switches,through which management devices can obtain the MAC addresses of the attachedswitches and thus the management of the attached switches is feasible.HABP is built on the client-server model. Typically, the HABP server sends HABPrequests to the client periodically to collect the MAC address(es) of the attachedswitch(es). The client responds to the requests, and forwards the HABP requests to theattached switch(es). The HABP server usually runs on the administrative device whilethe HABP client runs on the attached switches.For ease of switch management, it is recommended that you enable HABP for802.1x-enabled switches.3.2 HABP Server ConfigurationWith the HABP server launched, a management device sends HABP request packetsregularly to the attached switches to collect their MAC addresses. You need also toconfigure the interval on the management device for an HABP server to send HABPrequest packets.Follow these steps to configure an HABP server:To do... Use the command... RemarksEnter system view system-view —Enable HABP habp enable OptionalBy default, HABP is enabled.
