3Com 4500 50-PORT, 4500 PWR 50-PORT, 4500 26-PORT Dot1x supp-proxy-check Syntax, 4500dot1x retry

244CHAPTER 11: USING AAA AND RADIUS COMMANDS

Related commands: display dot1x.

Example

To configure the current device to transmit an authentication request frame to the user for no more than 9 times, enter the following:

<4500>system-view

System View: return to User View with Ctrl-Z

[4500]dot1x retry 9

dot1x supp-proxy-check Syntax

dot1x supp-proxy-check { logoff trap } [ interface interface-list] undo dot1x supp-proxy-check { logoff trap } [ interface interface-list]

View

Ethernet Port View

Parameter

logoff: Cuts network connection to a user upon detecting the use of proxy.

trap: Sends a trap message upon detecting a user using proxy to access the Switch.

interface interface-list:Ethernet interface list including several Ethernet interfaces, expressed in the format interface-list= { interface-num[ to interface-num] } & < 1-10 >. interface-numspecifies a single Ethernet interface in the format interface-num= { interface-typeinterface-numinterface-name}, where interface-typespecifies the interface type, interface-numspecifies the interface number and interface-namespecifies the interface name. For the respective meanings and value ranges, see the parameters in the Port Command chapter.

Description

Use the dot1x supp-proxy-checkcommand to configure the control method for 802.1x proxy users on the specified interface. Use the undo dot1x supp-proxy-checkcommand to cancel the control method set for 802.1x proxy users.

Note that when performing this function, the user logging on via proxy needs to run the 3Com 802.1x client program, (3Com 802.1x client program version V1.29 or above is needed).

This command is used to set a control method on the specified interface when executed in System View. The parameter interface-listcannot be input when the command is executed in Ethernet Port View and it takes effect only on the current interface. After globally enabling proxy user detection and control in System View, only if you enable this feature on a specific port can this configuration take effect on the port.

Related command: display dot1x.