MAC地址认证配置（三）H3C篇

sysname mac-authen Switch 更改主机名

vlan 32

vlan 90

vlan 100

int vlan 32 创建管理VLAN 32虚拟接口

ip address 172.16.32.253 24

配置管理IP为172.16.32.254/24

创建radius模版

radius scheme test.com

primary authentication 10.248.31.66

primary accounting 10.248.31.66

key authentication test.com

key accounting test.com

user-name-format without-domain

创建域

domain test.com

authentication default radius-scheme test.com

authorization default radius-scheme test.com

accounting default radius-scheme test.com

access-limit disable

state active

idle-cut disable

self-service-url disable

全局开启mac地址认证

mac-authentication

设置mac地址认证域

mac-authentication domain test.com

开启DHCP服务

dhcp enable

配置默认路由

ip route 0.0.0.0 0.0.0.0 172.16.32.254

配置接入的端口G1/0/1

interface GigabitEthernet1/0/1

description To client

port link-type hybrid

undo port hybrid vlan 1

port hybrid vlan 90 100 untagged

port hybrid pvid vlan 100

mac-authentication

mac-authentication guest-vlan 90

配置上联端口G1/0/24

interface GigabitEthernet1/0/24

description To Core-Switch-G10/0/1

port link-type trunk

port trunk permit vlan all

port trunk pvid vlan 32