3Com 2928 User Guide - Page 383

Perform the following configurations as shown in Figure 1-35. z Select GigabitEthernet1/0/1 from the port list. z Click Apply to finish the operation. Configuration verification # After the user passes authentication and gets online, use the ping command to test whether ACL 3000 takes effect. z From the navigation tree, select Network > Diagnostic Tools. The ping page appears. z Enter the destination IP address 10.0.0.1. z Click Start to start the ping operation. z Figure 1-36 shows the ping operation summary. Figure 1-36 Ping operation summary Configuration Guidelines When configuring 802.1X, note that: 1) 802.1X configuration on a specific port can take effect only after both global 802.1X and 802.1X on the specific port are enabled. 2) Do not change the timer parameters of global 802.1X from their default values unless you have determined that the changes would better the interaction process in some special network environment. 3) A port enabled with 802.1X cannot be added to an aggregation group. Meanwhile, it is prohibited to enable 802.1X on a port that belongs to an aggregation group. 4) For an 802.1X client using Extensible Authentication Protocol (EAP) authentication, the device directly encapsulates contents from the client and sends them to the authentication server. In this scenario, the configuration on username format on the device does not take effect. For details about username format configuration, refer to RADIUS Configuration. 5) The Voice VLAN and 802.1X functions are mutually exclusive on an access port if the connected client sends untagged traffic. 1-28