SNR S2989G-48TX-DC Руководство по Настройке онлайн [347/553] 747287

Превью страниц Страница 347 / 553

S2989G-24TX Operation Manual

Chapter 6 Security Function Configuration

6-74

To implement this application, the configuration is as follows:

Switch1 configuration:

(1) Enable 802.1x and MAB authentication function globally, configure

username and password of MAB authentication and radius-server

address

Switch(config)# dot1x enable

Switch(config)# mac-authentication-bypass enable

Switch(config)#mac-authentication-bypass username-format fixed username mabuser

password mabpwd

Switch(config)#vlan 8-10

Switch(config)#interface vlan 9

Switch(config-if-vlan9)ip address 192.168.61.9 255.255.255.0

Switch(config-if-vlan9)exit

Switch(config)#radius-server authentication host 192.168.61.10

Switch(config)#radius-server accounting host 192.168.61.10

Switch(config)#radius-server key test

Switch(config)#aaa enable

Switch(config)#aaa-accounting enable

(2) Enable the authentication function of each port

Switch(config)#interface ethernet 1/0/1

Switch(config-if-ethernet1/0/1)#dot1x enable

Switch(config-if-ethernet1/0/1)#dot1x port-method portbased

Switch(config-if-ethernet1/0/1)#dot1x guest-vlan 8

Switch(config-if-ethernet1/0/1)#exit

Switch(config)#interface ethernet 1/0/2

Switch(config-if-ethernet1/0/2)#switchport mode hybrid

Switch(config-if-ethernet1/0/2)#switchport hybrid native vlan 1

Switch(config-if-ethernet1/0/2)#switchport hybrid allowed vlan 1;8;10 untag

Switch(config-if-ethernet1/0/2)#mac-authentication-bypass enable

Switch(config-if-ethernet1/0/2)#mac-authentication-bypass enable guest-vlan 8

Switch(config-if-ethernet1/0/2)#exit

Switch(config)#interface ethernet 1/0/3

Switch(config-if-ethernet1/0/3)#switchport mode access

Switch(config-if-ethernet1/0/3)#mac-authentication-bypass enable