• 全部
  • 经验案例
  • 典型配置
  • 技术公告
  • FAQ
  • 漏洞说明
  • 全部
  • 全部
  • 大数据引擎
  • 知了引擎
产品线
搜索
取消
案例类型
发布者
是否解决
是否官方
时间
搜索引擎
匹配模式
高级搜索

WS5820-52TP-WiNet

2020-08-03提问
  • 0关注
  • 1收藏,821浏览
粉丝:0人 关注:0人

问题描述:

做完802.1X认证之后SSH登陆不上了,附件是配置,麻烦看看是什么问题。   

组网及组网描述:

配置我发下面的评论了

最佳答案

粉丝:0人 关注:0人

[xingzheng3-3]dis cu
#
version 7.1.070, Release 6127P01
#
sysname xingzheng3-3
#
voice-vlan mac-address 0001-e300-0000 mask ffff-ff00-0000
#
irf mac-address persistent timer
irf auto-update enable
undo irf link-delay
irf member 1 priority 1
#
dot1x
dot1x authentication-method eap
#
lldp global enable
#
loopback-detection global enable vlan 1 to 4094
loopback-detection interval-time 300
#
password-recovery enable
#
vlan 1
#
vlan 11
#
vlan 20
description changlingdao/fuzonggongchengshi
#
vlan 30
description dianzidangan
#
vlan 40
description gonghui
#
vlan 50
description jianchashenjibu
#
vlan 60
description changwugongzuobu
#
vlan 70
description caiwubu
#
vlan 80
description gongchengbu
#
vlan 90
description shichangyunyingbu
#
vlan 100
description ranliaoguanlibu
#
vlan 110
description wuzigongyingbu
#
vlan 120
description anquanjianchabu
#
vlan 130
description redongfenchang
#
vlan 140
description diankongfenchang
#
vlan 150
description renliziyuanbu
#
vlan 160
description sixiangzhengzhigongzuobu
#
vlan 170
description fadianfenchang
#
vlan 180
description meizhijianyanzhongxin
#
vlan 190
description shebeibu
#
vlan 200
description zonghe
#
vlan 210
description fuwuqi
#
vlan 220
description link to VPN
#
vlan 240
#
vlan 300
#
vlan 310
#
vlan 320
#
vlan 340
#
vlan 350
#
vlan 360
#
vlan 370
#
vlan 390
#
vlan 400
#
vlan 999
#
stp global enable
#
interface NULL0
#
interface Vlan-interface1
ip address 172.16.100.6 255.255.255.0
dhcp client identifier ascii f474887b8770-VLAN0001
#
interface GigabitEthernet1/0/1
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/2
port access vlan 350
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/3
port access vlan 370
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/4
port access vlan 350
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/5
port access vlan 350
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/6
port access vlan 350
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/7
port access vlan 130
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/8
port access vlan 350
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/9
port access vlan 350
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/10
port access vlan 350
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/11
port access vlan 310
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/12
port access vlan 310
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/13
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/14
port access vlan 310
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/15
port access vlan 310
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/16
port access vlan 310
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/17
port access vlan 90
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/18
port access vlan 130
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/19
port access vlan 310
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/20
port access vlan 130
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/21
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/22
port access vlan 90
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/23
port access vlan 90
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/24
port access vlan 90
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/25
port access vlan 70
dot1x
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/26
port access vlan 350
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/27
port access vlan 90
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/28
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/29
port access vlan 310
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/30
port access vlan 90
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/31
port access vlan 70
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/32
port access vlan 90
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/33
port access vlan 140
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/34
port access vlan 60
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/35
port access vlan 140
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/36
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/37
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/38
port access vlan 310
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/39
port access vlan 370
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/40
port access vlan 130
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/41
port access vlan 300
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/42
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/43
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/44
port access vlan 60
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/45
port access vlan 30
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/46
port access vlan 999
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/47
port access vlan 90
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/48
port link-type trunk
port trunk permit vlan all
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/49
port link-type trunk
port trunk permit vlan all
combo enable auto
#
interface GigabitEthernet1/0/50
port link-type trunk
port trunk permit vlan all
combo enable auto
#
interface GigabitEthernet1/0/51
port link-type trunk
port trunk permit vlan all
#
interface GigabitEthernet1/0/52
port link-type trunk
port trunk permit vlan all
#
scheduler logfile size 16
#
line class aux
user-role network-admin
#
line class vty
user-role network-operator
#
line aux 0
user-role network-admin
#
line vty 0 4
authentication-mode scheme
user-role network-admin
user-role network-operator
protocol inbound ssh
idle-timeout 0 0
#
line vty 5 63
authentication-mode scheme
user-role network-admin
user-role network-operator
idle-timeout 0 0
#
ip route-static 0.0.0.0 0 172.16.100.1
#
snmp-agent
snmp-agent local-engineid 800063A280F474887B877B00000001
snmp-agent community write private
snmp-agent community read public
snmp-agent sys-info version all
#
ssh server enable
ssh user admin service-type stelnet authentication-type password
ssh user ccsr_admin service-type stelnet authentication-type password
#
acl number 3050
rule 5 deny tcp destination-port eq 445
rule 15 deny udp destination-port eq 445
rule 20 deny tcp destination-port eq 139
rule 25 deny udp destination-port eq netbios-ssn
rule 30 deny tcp destination-port eq 137
rule 35 deny udp destination-port eq netbios-ns
rule 40 deny tcp destination-port eq 138
rule 45 deny udp destination-port eq netbios-dgm
rule 50 deny tcp destination-port eq 135
rule 55 permit ip
#
radius scheme dot1x
primary authentication 10.66.163.199
primary accounting 10.66.163.199
key authentication cipher $c$3$i5UR8NC3vIkh+ssaXICnJUx6rBFA+i4=
key accounting cipher $c$3$PtCIkkz1mlRhHWrEwi25PaifCk8JJqRL
user-name-format without-domain
#
domain dot1x
authentication default radius-scheme dot1x
authorization default radius-scheme dot1x
accounting default radius-scheme dot1x
#
domain system
#
aaa session-limit http 6
aaa session-limit https 6
domain default enable system
#
role name level-0
description Predefined level-0 role
#
role name level-1
description Predefined level-1 role
#
role name level-2
description Predefined level-2 role
#
role name level-3
description Predefined level-3 role
#
role name level-4
description Predefined level-4 role
#
role name level-5
description Predefined level-5 role
#
role name level-6
description Predefined level-6 role
#
role name level-7
description Predefined level-7 role
#
role name level-8
description Predefined level-8 role
#
role name level-9
description Predefined level-9 role
#
role name level-10
description Predefined level-10 role
#
role name level-11
description Predefined level-11 role
#
role name level-12
description Predefined level-12 role
#
role name level-13
description Predefined level-13 role
#
role name level-14
description Predefined level-14 role
#
user-group system
#
local-user admin class manage
password hash $h$6$zLoFw89qLcptsS80$7rPjirqGF2836HNEIqeRxAA94ewxBEz/Q3RfuLCOfopEzKNgjMpTdml3Vl10VM5wuTlpYxJJNtG7HNM0y/vXJA==
service-type ssh terminal
authorization-attribute user-role level-15
authorization-attribute user-role network-operator
#
local-user ccsr_admin class manage
password hash $h$6$LuNtSaOlA7osxc7+$Wgz24nAVKB9AVgKlnnkIJ4ZuCBS8dSmjXG4vY9Wf3eAbpc5jgJutFI0KUBH5qIymJ8ZQif2GA9I+DuHWHXg/kw==
service-type ssh terminal
authorization-attribute user-role level-15
authorization-attribute user-role network-operator
#
cloud-management server domain oasis.h3c.com
#
return

暂无评论

1 个回答
feihuo 七段
粉丝:7人 关注:0人

1x认证能通过吗?能ping通交换机吗?

暂无评论

编辑答案

你正在编辑答案

如果你要对问题或其他回答进行点评或询问,请使用评论功能。

分享扩散:

提出建议

    +

亲~登录后才可以操作哦!

确定

亲~检测到您登陆的账号未在http://hclhub.h3c.com进行注册

注册后可访问此模块

跳转hclhub

你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作

举报

×

侵犯我的权益 >
对根叔社区有害的内容 >
辱骂、歧视、挑衅等(不友善)

侵犯我的权益

×

泄露了我的隐私 >
侵犯了我企业的权益 >
抄袭了我的内容 >
诽谤我 >
辱骂、歧视、挑衅等(不友善)
骚扰我

泄露了我的隐私

×

您好,当您发现根叔知了上有泄漏您隐私的内容时,您可以向根叔知了进行举报。 请您把以下内容通过邮件发送到zhiliao@h3c.com 邮箱,我们会尽快处理。
  • 1. 您认为哪些内容泄露了您的隐私?(请在邮件中列出您举报的内容、链接地址,并给出简短的说明)
  • 2. 您是谁?(身份证明材料,可以是身份证或护照等证件)

侵犯了我企业的权益

×

您好,当您发现根叔知了上有关于您企业的造谣与诽谤、商业侵权等内容时,您可以向根叔知了进行举报。 请您把以下内容通过邮件发送到 zhiliao@h3c.com 邮箱,我们会在审核后尽快给您答复。
  • 1. 您举报的内容是什么?(请在邮件中列出您举报的内容和链接地址)
  • 2. 您是谁?(身份证明材料,可以是身份证或护照等证件)
  • 3. 是哪家企业?(营业执照,单位登记证明等证件)
  • 4. 您与该企业的关系是?(您是企业法人或被授权人,需提供企业委托授权书)
我们认为知名企业应该坦然接受公众讨论,对于答案中不准确的部分,我们欢迎您以正式或非正式身份在根叔知了上进行澄清。

抄袭了我的内容

×

原文链接或出处

诽谤我

×

您好,当您发现根叔知了上有诽谤您的内容时,您可以向根叔知了进行举报。 请您把以下内容通过邮件发送到zhiliao@h3c.com 邮箱,我们会尽快处理。
  • 1. 您举报的内容以及侵犯了您什么权益?(请在邮件中列出您举报的内容、链接地址,并给出简短的说明)
  • 2. 您是谁?(身份证明材料,可以是身份证或护照等证件)
我们认为知名企业应该坦然接受公众讨论,对于答案中不准确的部分,我们欢迎您以正式或非正式身份在根叔知了上进行澄清。

对根叔社区有害的内容

×

垃圾广告信息
色情、暴力、血腥等违反法律法规的内容
政治敏感
不规范转载 >
辱骂、歧视、挑衅等(不友善)
骚扰我
诱导投票

不规范转载

×

举报说明