华三交换机802.1x 认证配置详解 - 详细步骤和示例
华三交换机的802.1x认证配置步骤如下:
- 配置交换机的AAA服务器信息:
sysname Switch radius scheme radius primary authentication 1.1.1.1 key cipher 'Huawei@123' accounting optional user-interface vty 0 4 authentication-mode aaa protocol inbound radius radius enable
- 配置端口的802.1x认证:
interface GigabitEthernet1/0/1 port link-type access port default vlan 10 authentication port-control auto dot1x dot1x enable dot1x port-method port-based dot1x re-authentication dot1x timer re-authperiod 30 dot1x timer tx-period 10 dot1x guest-vlan 20 dot1x critical vlan 30 dot1x multicast-trigger
- 配置认证方式:
dot1x authentication-method eap dot1x eap profile default method eap authentication chap authentication mschapv2 authentication pap authentication eap
- 配置VLAN:
vlan batch 10 20 30 vlan 10 description 'Data vlan' vlan 20 description 'Guest vlan' vlan 30 description 'Critical vlan'
以上是华三交换机802.1x认证的基本配置步骤,具体配置可以根据实际情况进行调整。
原文地址: https://www.cveoy.top/t/topic/nJZo 著作权归作者所有。请勿转载和采集!