H3C交换机802.1X和MAC混合认证配置

需求:有线终端通过802.1X认证之后才能连入内网,并存在一些有线的哑终端需要通过mac地址通过认证。

#
 dot1x
 dot1x authentication-method eap
#
 mac-authentication
#
interface GigabitEthernet1/0/1
 port link-mode bridge
 dot1x
 mac-authentication
 undo dot1x handshake
 undo dot1x multicast-trigger
 dot1x unicast-trigger
 dot1x mandatory-domain test
 mac-authentication test
 mac-authentication timer auth-delay 30
#
domain test
 authentication lan-access radius-scheme test
 authorization lan-access radius-scheme test
 accounting lan-access radius-scheme test
#
radius scheme test
 primary authentication X.X.X.X
 secondary authentication X.X.X.X
 primary accounting X.X.X.X
 secondary accounting X.X.X.X
 key authentication cipher $c$3$FsA7TskwCaJF2jscwqea/HPI+nrhlDNwlP9564treSeK8=
 key accounting cipher $c$3$nTj+54awWywefwfzHwew2WvEeewqIwrtQUTdwe4f4vRD2cVSw=
 user-name-format without-domain
#


H3C交换机802.1X和MAC混合认证配置
http://localhost:8090/archives/lyyibrmH
作者
好瞌睡啊
发布于
2020年11月17日
许可协议