Manualsbrain.com
  1. Manuales
  2. Marcas
  3. 3com
  4. S7906E
  5. Instruccion De Instalación

3com S7906E Instruccion De Instalación

Descargar
Página de 2621
 
1-26 
[Device-radius-2000] primary accounting 10.11.1.1 1813 
[Device-radius-2000] key authentication abc 
[Device-radius-2000] key accounting abc 
[Device-radius-2000] user-name-format without-domain 
[Device-radius-2000] quit 
# Configure authentication domain system and specify to use RADIUS scheme 2000 for users of the 
domain. 
[Device] domain system 
[Device-isp-system] authentication default radius-scheme 2000 
[Device-isp-system] authorization default radius-scheme 2000 
[Device-isp-system] accounting default radius-scheme 2000 
[Device-isp-system] quit 
# Enable 802.1X globally. 
[Device] dot1x 
# Enable 802.1X for port GigabitEthernet 2/0/2. 
[Device] interface GigabitEthernet2/0/2 
[Device-GigabitEthernet2/0/2] dot1x 
# Set the port access control method to portbased.  
[Device-GigabitEthernet2/0/2] dot1x port-method portbased 
# Set the port authorization mode to auto. 
[Device-GigabitEthernet2/0/2] dot1x port-control auto 
[Device-GigabitEthernet2/0/2] quit 
# Create VLAN 10. 
[Device] vlan 10 
[Device-vlan10] quit 
# Specify port GigabitEthernet 2/0/2 to use VLAN 10 as its guest VLAN. 
[Device] dot1x guest-vlan 10 interface gigabitethernet 2/0/2 
You can use the display current-configuration or display interface gigabitethernet 2/0/2 command 
to view your configuration. You can also use the display vlan 10 command to verify whether the 
configured guest VLAN functions normally when the device sends authentication triggering packets 
(EAP-Request/Identity) for more than the specified number of times in the following cases: 
z 
When no users log in. 
z 
When a user goes offline. 
After a user passes the authentication successfully, you can use the display interface gigabitethernet 
2/0/2 command to verity that port GigabitEthernet 2/0/2 has been added to the assigned VLAN 5. 
ACL Assignment Configuration Example 
Network requirements 
As shown in 
, a host is connected to port GigabitEthernet 2/0/1 of the device and must pass 
802.1X authentication to access the Internet.  
z 
Configure the RADIUS server to assign ACL 3000.  
z 
Enable 802.1X authentication on port GigabitEthernet 2/0/1 of the device, and configure ACL 3000.