3Com Switch 7750 Series
Command Reference Guide – 802.1x Chapter 1 802.1x Configuration Commands
1-6
undo dot1x authentication-method
View
System view
Parameter
chap: Authenticates with the help of challenge handshake authentication protocol
(CHAP).
pap: Authenticates with the help of password authentication protocol (PAP).
eap: Authenticates with the help of extensible authentication protocol (EAP).
Description
Use the dot1x authentication-method command to set the 802.1x authentication
method.
Use the undo dot1x authentication-method command to revert to the default 802.1x
authentication method.
The default 802.1x authentication method is CHAP.
PAP applies a two-way handshaking procedure. In this method, passwords are
transmitted in plain text.
CHAP applies a three-way handshaking procedure. In this method, user names are
transmitted rather than passwords. Therefore this method is safer.
In an EAP authentication method, a switch sends 802.1x authentication information
directly to the RADIUS server in EAP packets, instead of having to convert them into
RADIUS packets before forwarding to the RADIUS server. EAP authentication can be
realized in one of the three sub-methods: PEAP, EAP-TLS, and EAP-MD5.
Note that the RADIUS server must support PAP, CHAP, or EAP authentication before
the corresponding authentication can be implemented.
Related command: display dot1x.
Example
# Specify the authentication method for 802.1x users to be PAP.
<3Com>system-view
System View: return to User View with Ctrl+Z.
[3Com] dot1x authentication-method pap
1.1.4 dot1x dhcp-launch Syntax
dot1x dhcp-launch