H3C交换机802.1X和MAC混合认证配置
需求:有线终端通过802.1X认证之后才能连入内网,并存在一些有线的哑终端需要通过mac地址通过认证。
#
dot1x
dot1x authentication-method eap
#
mac-authentication
#
interface GigabitEthernet1/0/1
port link-mode bridge
dot1x
mac-authentication
undo dot1x handshake
undo dot1x multicast-trigger
dot1x unicast-trigger
dot1x mandatory-domain test
mac-authentication test
mac-authentication timer auth-delay 30
#
domain test
authentication lan-access radius-scheme test
authorization lan-access radius-scheme test
accounting lan-access radius-scheme test
#
radius scheme test
primary authentication X.X.X.X
secondary authentication X.X.X.X
primary accounting X.X.X.X
secondary accounting X.X.X.X
key authentication cipher $c$3$FsA7TskwCaJF2jscwqea/HPI+nrhlDNwlP9564treSeK8=
key accounting cipher $c$3$nTj+54awWywefwfzHwew2WvEeewqIwrtQUTdwe4f4vRD2cVSw=
user-name-format without-domain
#
H3C交换机802.1X和MAC混合认证配置
http://localhost:8090/archives/lyyibrmH