3com 4200G ユーザーズマニュアル

ページ / 336
224
C
HAPTER
 23: Q
O
S/Q
O
S P
ROFILE
 C
ONFIGURATION
 G
UIDE
# Enable 802.1x.
[3Com] dot1x
[3Com] dot1x interface Ethernet 1/0/1 
Complete Configuration
#
dot1x
#
radius scheme system
radius scheme radius1
server-type standard
primary authentication 10.11.1.1
primary accounting 10.11.1.2
secondary authentication 10.11.1.2
secondary accounting 10.11.1.1
key authentication money
key accounting money
user-name-format without-domain
#
domain system
domain test.net
scheme radius-scheme radius1
#
acl number 3000
rule 0 permit IP
#
qos-profile example
traffic-limit inbound ip-group 3000 rule 0 128 exceed drop
#
interface Ethernet1/0/1
dot1x
Precautions
Note that:
A QoS profile can be applied manually or dynamically. You can use the apply 
qos-profile
 profile-name command to manually apply a QoS profile to a port. 
You can also combine a QoS profile with the 802.1x authentication function to 
provide the pre-defined QoS function for a user or a group of users that have 
passed authentication.
Depending on the 802.1x authentication mode, dynamic QoS profile 
application mode can be user-based or port-based. The user-based mode is the 
default mode.
If the traffic classification rules of a QoS profile take source information 
(including source MAC, source IP, VLAN) as the match criterion, the QoS profile 
cannot be applied in the user-based mode.
Currently, the QoS profile function provides packet filtering, traffic policing, 
and priority marking.
The granularity of traffic policing is 64 kbps. If the value you input is in the 
range of N
×64 to (N+1)×64 (N is a natural number), the switch sets the value to 
(N+1)
×64 kbps automatically.