3Com 5500G-EI Command Reference Guide - Page 345

802.1x Configuration Commands 345 enabled globally, if the parameters are not configured globally or for a specified port, they will maintain the default values. After the global 802.1x performance is enabled, only when port 802.1x performance is enabled will the configuration of 802.1x become effective on the port. Related commands: display dot1x. Example To enable 802.1x on GigabitEthernet 1/0/1, enter the following. system-view System View: return to User View with Ctrl-Z [SW5500]dot1x interface gigabitethernet 1/0/1 To enable 802.1x globally, enter the following. [SW5500]dot1x dot1x Syntax authentication-method dot1x authentication-method { chap | pap | eap md5-challenge } undo dot1x authentication-method View System View Parameter Chap: Use CHAP authentication method. Pap: Use PAP authentication method. eap: Use EAP authentication method. At present, only md5 encryption method is available Description Use the dot1x authentication-method command to configure the authentication method for the 802.1x user. Use the undo dot1x authentication-method command to restore the default authentication method of the 802.1x user. By default, CHAP authentication is used for 802.1x user authentication. Password Authentication Protocol (PAP) is a kind of authentication protocol with two handshakes. It sends the password in the form of simple text. Challenge Handshake Authentication Protocol (CHAP) is a kind of authentication protocol with three handshakes. It only transmits the username, not the password. CHAP is more secure and reliable. In the process of EAP authentication, the Switch directly sends authentication information of an 802.1x user to a RADIUS server in the form of anEAP packet. It is