3com S7906E Instruccion De Instalación

 

1-24 

You can use the display dot1x interface gigabitethernet 2/0/1 command to view the 802.1X 

configuration information. After an 802.1X user passes the RADIUS authentication with the username 

in the format of username@aabbcc.net, you can use the display connection command to view the 

connection information of the user. If the user fails the RADIUS authentication, local authentication of 

the user will be performed. 

As shown in 

z 

A host is connected to port GigabitEthernet 2/0/2 of the device and must pass 802.1X 

authentication to access the Internet. GigabitEthernet 2/0/2 is in VLAN 1. 

z 

The authentication server runs RADIUS and is in VLAN 2.  

z 

The update server, which is in VLAN 10, is for client software download and upgrade.  

z 

Port GigabitEthernet 2/0/3 of the device, which is in VLAN 5, is for accessing the Internet. 

As shown in 

z 

On port GigabitEthernet 2/0/2, enable 802.1X and set VLAN 10 as the guest VLAN of the port. If the 

device sends an EAP-Request/Identity packet from the port for the maximum number of times but 

still receives no response, the device adds the port to its guest VLAN. In this case, the host and the 

update server are both in VLAN 10, so that the host can access the update server and download 

the 802.1X client. 

As shown in 

z 

After the host passes the authentication and logs in, the host is added to VLAN 5. In this case, the 

host and GigabitEthernet 2/0/3 are both in VLAN 5, so that the host can access the Internet. 

Figure 1-11 Network diagram for guest VLAN configuration