Operation Manual – 802.1xH3C S7500 Series Ethernet Switches Chapter 1 802.1x Configuration1-19Table 1-7 Display and debug 802.1xTo do... Use the command... RemarksDisplay the configuration,health, and statistics about802.1xdisplay dot1x [ sessions |statistics ] [ interfaceinterface-list ]In any viewClear 802.1x-related statisticsinformationreset dot1x statistics [ interfaceinterface-list ] In user view1.7 Configuration Example1.7.1 802.1x Configuration ExampleI. Network requirementsz Supplicant systems are authenticated on all ports to control their accesses to theInternet. The switch operates in MAC address-based access control mode.z All supplicant systems that pass the authentication belong to the default domainnamed aabbcc.net. The domain can accommodate up to 30 users. Forauthentication, a supplicant system is authenticated locally if the RADIUS serverfails. For accounting, a supplicant system is disconnected if the RADIUS serverfails. The name of an authenticated supplicant system is not suffixed with thedomain name. The switch will tear down the connection to the supplicant system ifthe traffic is less than 2,000 bytes within 20 minutes.z The switch is connected to the server group composed of two RADIUS serverswhose IP addresses are 10.11.1.1 and 10.11.1.2 respectively. The RADIUSserver with an IP address of 10.11.1.1 operates as the primary authenticationserver and the secondary accounting server. The other operates as the secondaryauthentication server and the primary accounting server. The password for theswitch and the authentication RADIUS servers to exchange message is name.And the password for the switch and the accounting RADIUS servers to exchangemessage is money. When the switch sends a packet to the RADIUS server butdoes not receive any response in 5 seconds, it will send the packet to the RADIUSservers again for a maximum number of 5 retries. And the switch sends a real-timeaccounting packet to the RADIUS servers once in every 15 minutes. A user nameis sent to the RADIUS servers with the domain name truncated.z The user name and password for local 802.1x authentication are localuser andlocalpass (in plain text) respectively. The idle disconnecting function is enabled.
