Operation Manual – 802.1xH3C S7500 Series Ethernet Switches Chapter 2 HABP Configuration2-1Chapter 2 HABP ConfigurationWhen configuring HABP, go to these sections for information you are interested in:z Introduction to HABPz HABP Server Configurationz HABP Client Configurationz Displaying HABP2.1 Introduction to HABPWith 802.1x enabled, a switch will authenticate and authorize 802.1x-enabled ports.Packets can be forwarded only by authorized ports. If those ports connected to theswitch are not authenticated and authorized by 802.1x, all packets will be filtered. Thismeans that users cannot manage the attached switches. Huawei authentication bypassprotocol (HABP) can solve this problem.HABP packets carry the MAC addresses of the attached switches. Once HABP isenabled on the switches, HABP packets will be allowed to bypass 802.1xauthentication and travel through the switches. In this way, management devices canobtain the MAC addresses of the attached switches for high efficient management.HABP is implemented by HABP server and HABP client. Normally, an HABP serversends HABP request packets regularly to HABP clients to collect the MAC addresses ofthe attached switches. HABP clients will respond to the HABP request packets andforward the HABP request packets to the lower layer switches. The HABP serverusually resides on management devices and HABP clients usually reside on theattached switches.It is recommended to enable HABP for 802.1x-enabled switches for managementpurpose.2.2 HABP Server ConfigurationWith the HABP server launched, a management device sends HABP request packetsregularly to the attached switches to collect their MAC addresses. The interval to sendHABP request packets is also configured on the management device.Table 2-1 Configure an HABP serverTo do... Use the command... RemarksEnter system view system-view —Enable HABP habp enable RequiredEnabled by default
