The authentication no-replace dot1x command configures the device not to respond to the EAP start packets sent from users who have successfully passed MAC address authentication or Portal authentication.
The undo authentication no-replace dot1x command configures the device to respond to the EAP start packets sent from users who have successfully passed MAC address authentication or Portal authentication.
By default, the device responds to the EAP start packets sent from users who have successfully passed MAC address authentication or Portal authentication.
authentication no-replace dot1x [ device-type voice ]
undo authentication no-replace dot1x [ device-type voice ]
| Parameter | Description | Value |
|---|---|---|
| device-type voice | Configures the function to be effective only for voice terminals. When this parameter is not specified, the function is effective for all terminals. |
- |
Usage Scenario
After passing MAC address authentication, some voice terminals still send EAP start packets. If the device returns response packets, the voice terminals go offline. To address this problem, you can configure the device not to respond to the EAP start packets sent from users who have successfully passed MAC address authentication or Portal authentication.
Precautions
This function is effective only for wired users.
No matter whether this function is configured, the device responds to EAP Start packets sent from 802.1X users.
# Configure the device not to respond to the EAP start packets sent from users who have successfully passed MAC address authentication or Portal authentication.
<HUAWEI> system-view [HUAWEI] authentication-profile name p1 [HUAWEI-authen-profile-p1] authentication no-replace dot1x device-type voice