H3C-802.1x应用.doc

网络拓扑:dis cu#sysname layer_2_3#domain default enable /使能自己建立的域#loopback-detection enable#gvrp#dot1x /全局启用802.1xdot1x authentication-method eap /使用EAP验证方式#radius scheme systemradius scheme test /建立testserver-type standardprimary authentication /指定主验证服务器，还可以指定辅验证服务器accounting optional /计费可选项，注意，当没有计费服务器，必须加上这条命令，否则无法验证通过key authentication test /验证密码：test#domain /建立域scheme radius-scheme test /使用上面建立的radius schem:testvlan-assignment-mode string /指定VLAN匹配模式为字符型（string）,也可以指定匹配模式为整形（integer），这个与radius server属性里面的设置是相关联的。domain system#stp enable#vlan 1#vlan 3name test#vlan 21name guest-vlan#interface Vlan-interface1ip address #interface Vlan-interface7#interface Aux1/0/0#interface Ethernet1/0/1broadcast-suppression 40port access vlan 3#interface Ethernet1/0/2broadcast-suppression 40port access vlan 3#interface Ethernet1/0/3 broadcast-suppression 40 /广播抑制，无关紧要。 dot1x port-method portbased dot1x guest-vlan 21 /验证不通过时，将获得vlan21的内容。 dot1x#interface Ethernet1/0/4broadcast-suppression 40port access vlan 3#interface Ethernet1/0/5broadcast-suppression 40port access vlan 3#interface Ethernet1/0/6broadcast-suppression 40port access vlan 3#interface Ethernet1/0/7broadcast-suppression 40port access vlan 3#interface Ethernet1/0/8broadcast-suppression 40port access vlan 3#interface Ethernet1/0/9broadcast-suppression 40port access vlan 3#interface Ethernet1/0/10broadcast-suppression 40port access vlan 3#interface Ethernet1/0/11broadcast-suppression 40port access vlan 3#interface Ethernet1/0/12broadcast-suppression 40port access vlan 3#interface Ethernet1/0/13broadcast-suppression 40port access vlan 3#interface Ethernet1/0/14broadcast-suppression 40port access vlan 3#interface Ethernet1/0/15broadcast-suppression 40port access vlan 3#interface Ethernet1/0/16broadcast-suppression 40port access vlan 3#interface Ethernet1/0/17broadcast-suppression 40port access vlan 3#interface Ethernet1/0/18broadcast-suppression 40port access vlan 3#interface Ethernet1/0/19broadcast-suppression 40port access vlan 3#interface Ethernet1/0/20broadcast-suppression 40port access vlan 3#interface Ethernet1/0/21broadcast-suppression 40port access vlan 3#interface Ethernet1/0/22broadcast-suppression 40port access vlan 3#interface Ethernet1/0/23broadcast-suppression 40port access vlan 3#interface Ethernet1/0/24broadcast-suppression 40port access vlan 3#interface GigabitEthernet1/1/1port link-type trunkport trunk permit vlan allbroadcast-suppression 40gvrp#interface GigabitEthernet1/1/2port link-type trunkport trunk permit vlan allbroadcast-suppression 40#interface GigabitEthernet1/1/3port link-type trunkport trunk permit vlan allbroadcast-suppression 40gvrp#interface GigabitEthernet1/1/4broadcast-suppression 40port access vlan 3#undo irf-fabri