华为交换机dot1x配置认证方式

转载至：https://www.csdn.net/tags/MtTaMgysMDI1NDA3LWJsb2cO0O0O.html

设备分配IP 12.16.43.250 vlan 分配IP 12.16.43.251

华为交换机

配置vlan

interface vlanif xx
vlan xx ip address 16.12.43.251 255.255.255.0 (vlan ip 在认证界面添加交换机参数使用)

radius-server

radius-server template radius1(自己起)
radius-server shared-key cipher 123456(自己起)
radius-server authentication 16.12.43.250 1812 weight 80
radius-server accounting 16.12.43.250 1813 weight 80
radius-server nas-port-format old radius-server nas-port-id-format old

AAA

authentication-scheme authen1(自己起)
authentication-mode radius
authorization-scheme author1(自己起)
authorization-mode none
accounting-scheme acct1(自己起)
accounting-mode radius
accounting realtime 3

domain

domain 8021x(自己起)
authentication-scheme authen1(前面创建的)
accounting-scheme acct1(前面创建的)
authorization-scheme author1(前面创建的)
radius-server radius1(前面创建的)

开启全局dot1x

dot1x enable(全局)
dot1x authentication-method eap
dot1x quiet-period
dot1x timer quiet-period 3
dot1x timer reauthentication-period 1800

开启端口dot1x

interface GigabitEtherent x/x/A
dot1x enable
dot1x port-control auto
dot1x port-method mac
dot1x reauthenticate

转载至：https://www.csdn.net/tags/MtTaMgysMDI1NDA3LWJsb2cO0O0O.html