华为AD+NPS+DHCP+MAC地址认证配置(二)华为篇
配置核心交换机、服务器交换机、接入交换机作者：闫欢Q Q：253408824七、 配置网络设备（华为篇）1、 配置核心交换机（华为S7712）sysname Core-Switch 更改主机名vlan batch 31 32 90 100 批量创建vlanint vlan 32 创建管理vlan 32虚拟接口ip address 172.16.32.254 24 配置管理vlan 32 网关地址int vlan 31 创建服务器vlan 31虚拟接口ip address 172.16.31.254 24 配置服务器vlan 31 网关地址int vlan 90 创建业务vlan 90虚拟接口ip address 192.168.0.254 24 配置业务vlan 90 网关地址dhcp select relaydhcp relay server-ip 172.16.31.66配置DHCP中继服务器为172.16.31.66int vlan 100 创建业务vlan 100虚拟接口ip address 172.16.0.254 24 配置业务vlan 100 网关地址dhcp select relaydhcp relay server-ip 172.16.31.66配置DHCP中继服务器为172.16.31.66开启DHCP服务dhcp enableG10/0/1端口配置int G10/0/1description To mac-authen Switch-G1/0/24port link-type trunkport trunk pvid vlan 32port trunk allow-pass vlan allG10/0/2接口配置int G10/0/2description To Server Switch-G0/0/48port link-type trunkport trunk pvid vlan 32port trunk allow-pass vlan all2、 配置服务器端交换机（S5700）sysname Server Switch 更改主机名vlan batch 31 32 创建vlan 31、32int Vlan 32 创建管理VLAN 32虚拟接口ip address 172.16.32.252 24 配置管理IP地址配置默认路由ip route 0.0.0.0 0.0.0.0 172.16.32.254上联端口G0/0/48配置interface GigabitEthernet0/0/1description To Core-Switch-G10/0/2port link-type accessport default vlan 31连接服务器端口G0/0/1配置interface GigabitEthernet0/0/1description To Windows Server 2008port link-type accessport default vlan 313、配置接入交换机 (华为)sysname mac-authen Switch 更改主机名vlan batch 32 90 100 批量创建VLAN 32 222和223int Vlan 32 创建管理VLAN 32虚拟接口ip address 172.16.32.253 24配置管理IP为172.16.32.254/24创建radius模版radius-server template test.comradius-server shared-key simple test.comradius-server authentication 172.16.31.66 1812radius-server accounting 172.16.31.66 1813radius-server retransmit 2undo radius-server user-name domain-included配置aaaaaaauthentication-scheme test.comauthentication-mode radiusauthorization-scheme test.comaccounting-scheme test.comaccounting-mode radiusdomain test.comauthentication-scheme test.comaccounting-scheme test.comauthorization-scheme test.comradius-server test.com全局开启mac地址认证mac-authen设置mac地址认证域mac-authen domain test.com开启DHCP服务dhcp enable配置默认路由ip route 0.0.0.0 0.0.0.0 172.16.32.254配置接入的端口G0/0/1port hybrid pvid vlan 100undo port hybrid vlan 1port hybrid untagged vlan 100mac-authenmac-authen guest-vlan 90mac-authen max-user 1配置上联端口G0/0/24interface GigabitEthernet0/0/24description To Core-Switch-G10/0/1port link-type trunkport trunk pvid vlan 32port trunk allow-pass vlan 2 to 4094网络设备全部配置完毕我喜欢孩子，更喜欢造孩子的过程! 相当不错，感谢无私分享精神！ 生活***好玩，因为生活老***玩我! 饭在锅里,我在床上*^_^* 不要在一棵树上吊死，在附近几棵树上多试试死几次~ 相当不错，感谢无私分享精神！
页:
[1]