H3C S5500-EI Series Operation Manual

Also see for S5500-EI series: Operation manual Operation manual Configuration guide Operation manual – port security Configuration guide

H3C S5500-EI Series Operation Manual Manual pdf 34 page image

Operation Manual – 802.1x-HABP-MAC AuthenticationH3C S5500-EI Series Ethernet Switches Chapter 3 HABP Configuration3-1Chapter 3 HABP ConfigurationWhen configuring HABP, go to these sections for the information you are interested in:z Introduction to HABPz Configuring HABPz Displaying and Maintaining HABP3.1 Introduction to HABPWhen a switch is configured with the 802.1x function, 802.1x will authenticate andauthorize 802.1x-enabled ports and allow only the authorized ports to forward packets.If a port fails 802.1x authentication and authorization, protocol packets passing the portwill be blocked. The Huawei Authentication Bypass Protocol (HABP) aims at solvingthis problem.On an HABP-capable switch, HABP packets can bypass 802.1x authentication andMAC authentication, allowing communication among switches.HABP is built on the client-server model. Typically, the HABP server sends HABPrequests to the client periodically to collect the MAC address(es) of the attachedswitch(es). The client responds to the requests, and forwards the HABP requests to theattached switch(es). The HABP server usually runs on the administrative device whilethe HABP client runs on the attached switches.3.2 Configuring HABPComplete the following tasks to configure HABP:z Configuring the HABP Serverz Configuring an HABP Client3.2.1 Configuring the HABP ServerWith enabled with HABP server, the administrative device starts to send HABPrequests to the attached switch(es). The HABP responses include the MAC address(es)of the attached switch(es). This makes it possible for the administrative device tomanage the attached switch(es).You only need to configure the interval of sending HABP requests on the administrativedevice.