dot1x authentication trigger

Function

The dot1x authentication trigger command enables the device to initiate EAP authentication.

The undo dot1x authentication trigger command restores the default configuration.

By default, the device is disabled from initiating EAP authentication.

This command is supported only on the NetEngine 8000 F1A.

Format

dot1x authentication trigger

undo dot1x authentication trigger

Parameters

None

Views

BAS interface view

Default Level

2: Configuration level

Task Name and Operations

Task Name	Operations
dot1x	write

Usage Guidelines

Usage Scenario

The following packets can be sent to trigger the access of 802.1X users:

EAP Start packets
DHCP Discover packets
ARP/IP packets
By default, EAP authentication can only be triggered by sending an EAP Start packet. If EAP authentication needs to be triggered by sending a DHCP Discovery packet or an ARP/IP packet, run the dot1x authentication trigger command to enable the device to initiate EAP authentication. The EAP Start packet triggers the pop-up of the client interface, from where the user enters the user name and password to start the authentication.

Precautions

In VS mode, this command is supported only by the admin VS.

Example

# Enable the BAS interface GE0/1/0 to initiate EAP authentication.

<HUAWEI> system-view
[~HUAWEI] interface GigabitEthernet 0/1/0
[~HUAWEI-GigabitEthernet0/1/0] bas
[~HUAWEI-GigabitEthernet0/1/0-bas] access-type layer2-subscriber
[*HUAWEI-GigabitEthernet0/1/0-bas] commit
[~HUAWEI-GigabitEthernet0/1/0-bas] dot1x authentication trigger