dot1x 在H3C交换机上的典型配置

star870126

　　#
sysname Quidway
#
radius scheme system
server-type huawei
primary authentication 127.0.0.1 1645
primary accounting 127.0.0.1 1646
accounting optional
user-name-format without-domain
radius scheme rs1
primary authentication 10.153.42.52 1812
primary accounting 10.153.42.52 1813
accounting optional
key authentication cams
key accounting cams
user-name-format without-domain
　　domain system
radius-scheme rs1
access-limit disable
state active
vlan-assignment-mode integer
idle-cut disable
self-service-url disable                 
messenger time disable
　　domain default enable system
#
local-server nas-ip 127.0.0.1 key huawei
#
vlan range 1-511
#
dot1x
#
queue-scheduler wrr 1 2 4 8
#
vlan 1                                    
#
vlan 2
#
interface Vlan-interface1
ip address 10.153.49.251 255.255.252.0
#
interface Aux0/0
#
interface Ethernet0/1
port access vlan 2
#
interface Ethernet0/2
port access vlan 2
#
interface Ethernet0/3
port access vlan 2
#
interface Ethernet0/4
port access vlan 2
#
interface Ethernet0/5
#                                         
interface Ethernet0/6
#
interface Ethernet0/7
dot1x
#
interface Ethernet0/8
port link-type trunk
port trunk permit vlan 1 to 2
#
interface NULL0
#
ip route-static 0.0.0.0 0.0.0.0 10.153.48.1 preference 60
#
user-interface aux 0
user-interface vty 0 4
#
return