SNR S2989G-24TX-POE — настройка функций безопасности для сетевых устройств [314/553]

Превью страниц Страница 314 / 553

S2989G-24TX Operation Manual

Chapter 6 Security Function Configuration

6-41

Ethernet1/0/

VLAN2

Ethernet1/0/

SWITCH

Ethernet1/0/6

VLAN5

Internet

User

Update server Authenticator server

Figure 6-15 User Being Online, VLAN Being Offline

As illustrated in the up figure, when the users become online after a successful

authentication, the authentication server will assign VLAN5, which makes the user and

Ethernet1/0/6 both in VLAN5, allowing the user to access the Internet.

The following are configuration steps:

# Configure RADIUS server.

Switch(config)#radius-server authentication host 10.1.1.3

Switch(config)#radius-server accounting host 10.1.1.3

Switch(config)#radius-server key test

Switch(config)#aaa enable

Switch(config)#aaa-accounting enable

# Create VLAN100.

Switch(config)#vlan 100

# Enable the global 802.1x function

Switch(config)#dot1x enable

# Enable the 802.1x function on port Ethernet1/0/2

Switch(config)#interface ethernet1/0/2

Switch(Config-If-Ethernet1/0/2)#dot1x enable

# Set the link type of the port as access mode.

Switch(Config-If-Ethernet1/0/2)#switch-port mode access