H3C EAD Quick Deployment Configure Guide
1. Customer Requirement:
Customer need to configure EAD Quick Deployment.
Device list : 1 web server,PC Clients, switch which surport EAD Quick Deployment.
2. Topology:
3. Active Configurations:
1) Configure Global dot1x
[h3c]dot1x
2) Configure URL for HTTP redirection
[h3c]dot1x url http://1.1.1.10/client
3) Configure free-ip
[h3c]dot1x free-ip 1.1.1.10 24
4) Configure port dot1x
[h3c]interface g1/0/1
[h3c-GigabitEthernet1/0/1]dot1x
5) Set the ACL timer to 10 minutes
[h3c]dot1x timer acl-timeout 100
4. Some Advice:
1) You must configure the URL for HTTP redirection before configuring a free IP range. A URL must start with http:// and the segment where the URL resides must be in the free IP range. Otherwise, the redirection function cannot take effect.
2) You must disable the DHCP-triggered authentication function of 802.1x before configuring a free IP range.
3) With dot1x enabled but quick EAD deployment disabled, users cannot access the DHCP server if they fail 802.1x authentication. With quick EAD deployment enabled,users can obtain IP addresses dynamically before passing authentication if the IP address of the DHCP server is in the free IP range.
4) Currently, the quick EAD deployment function does not support port security. The configured free IP range cannot take effect if you enable port security.
5) If we use the domain name to redirect the Redirect URL, we should first add the DNS Server IP to the Free-IP to insure the domain name can be resolve, or else the redirect cannot be success.
该案例暂时没有网友评论
✖
案例意见反馈
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作