5130S系类交换机:配置如下
[H3C]dot1x
[H3C]dot1x authentication-method eap
[H3C]local-user admin
[H3C-luser-admin]password simple admin@123
[H3C-luser-admin]service-type lan-access
[H3C]radius scheme 80RZ
[H3C-radius-80rz]primary authentication 172.16.100.200
[H3C-radius-80rz]key authentication simple H3C
[H3C-radius-80rz]user-name-format without-domain
[H3C-radius-80rz]nas-ip 192.168.200.200
[H3C]domain GUN
[H3C-isp-GUN]authentication lan-access radius-scheme 80RZ local
[H3C-isp-GUN]authorization lan-access radius-scheme 80RZ local
[H3C]interface GigabitEthernet1/0/10
[H3C-GigabitEthernet1/0/10]dot1x
[H3C-GigabitEthernet1/0/10]dot1x port-method macbased
[H3C-GigabitEthernet1/0/10]dot1x mandatory-domain GUN
[H3C-GigabitEthernet1/0/10]undo dot1x handshake
[H3C-GigabitEthernet1/0/10]undo dot1x multicast-trigger
暂无评论