SNR S2989G-24TX-UPS — настройка функций безопасности и RADIUS на коммутаторе [316/553]

Превью страниц Страница 316 / 553

S2989G-24TX Operation Manual

Chapter 6 Security Function Configuration

6-43

Switch(config)#interface vlan 1

Switch(Config-if-vlan1)#ip address 10.1.1.2 255.255.255.0

Switch(Config-if-vlan1)#exit

Switch(config)#radius-server authentication host 10.1.1.3

Switch(config)#radius-server accounting host 10.1.1.3

Switch(config)#radius-server key test

Switch(config)#aaa enable

Switch(config)#aaa-accounting enable

Switch(config)#dot1x enable

Switch(config)#interface ethernet 1/0/2

Switch(Config-Ethernet1/0/2)#dot1x enable

Switch(Config-Ethernet1/0/2)#dot1x port-control auto

Switch(Config-Ethernet1/0/2)#exit

6.2.3.3 Examples of IPv6 Radius Application

2004:1:2:3::2

2004:1:2:3::1

Radius Server

2004:1:2:3::3

Figure 6-17 IPv6 Radius

Connect the computer to the interface 1/0/2 of the switch, and enable IEEE802.1x on

interface1/0/2. Use MAC based authentication. Configure the IP address of the switch as

2004:1:2:3::2, and connect the switch with any interface except interface 1/0/2 to the

RADIUS authentication server. Configure the IP address of the RADIUS server to be

2004:1:2:3::3. Use the default ports 1812 and 1813 for authentication and accounting

respectively. Install the IEEE802.1x authentication client software on the computer, and

use the client for IEEE802.1x authentication.

The detailed configurations are listed as below:

Switch(config)#interface vlan 1

Switch(Config-if-vlan1)#ipv6 address 2004:1:2:3::2/64