1-11In response to any of the three cases, a switch can optionally take the following measures:z Only disconnects the supplicant system but sends no Trap packets.z Sends Trap packets without disconnecting the supplicant system.This function needs the cooperation of 802.1x client and a CAMS server.z The 802.1x client needs to be capable of detecting multiple network adapters, proxies, and IEproxies.z The CAMS server is configured to disable the use of multiple network adapters, proxies, or IEproxies.By default, an 802.1x client program allows use of multiple network adapters, proxies, and IE proxies. Inthis case, if the CAMS server is configured to disable use of multiple network adapters, proxies, or IEproxies, it prompts the 802.1x client to disable use of multiple network adapters, proxies, or IE proxiesthrough messages after the supplicant system passes the authentication.z The client-checking function needs the support of H3C’s 802.1x client program.z To implement the proxy detecting function, you need to enable the function on both the 802.1xclient program and the CAMS server in addition to enabling the client version detecting function onthe switch by using the dot1x version-check command.Checking the client versionWith the 802.1x client version-checking function enabled, a switch checks the version and validity of an802.1x client to prevent unauthorized users or users with earlier versions of 802.1x client from loggingin.This function makes the switch to send version-requesting packets again if the 802.1x client fails tosend version-reply packet to the switch when the version-checking timer times out.The 802.1x client version-checking function needs the support of H3C’s 802.1x client program.The guest VLAN functionThe guest VLAN function enables supplicant systems that are not authenticated to access networkresources in a restrained way.The guest VLAN function enables supplicant systems that do not have 802.1x client installed to accessspecific network resources. It also enables supplicant systems that are not authenticated to upgradetheir 802.1x client programs.With this function enabled:
