华为dot1x认证测试配置

华为dot1x认证测试配置

[NW_HJ_NACC_5F-3_S3700]d cu#!Software Version V100R006C03sysname NW_HJ_NACC_5F-3_S3700#info-center source default channel 0 trap state off level warning#vlan batch 9 to 11 999#domain radius#dot1x enabledot1x authentication-method eap#server load flash:/s3700-52p-ei-v100r006c03.web.zip#radius-server template dot1xserverradius-server shared-key cipher %$%$VcUC)ROF"+l[Y03TVe6OAh_V%$%$radius-server authentication 10.209.2.10 1812radius-server authentication 10.209.2.11 1812 secondaryradius-server accounting 10.209.2.10 1813radius-server accounting 10.209.2.11 1813 secondaryradius-server retransmit 2#acl number 2001rule 1 permit source 10.211.2.209 0     rule 2 permit source 10.211.2.248 0rule 3 permit source 10.209.58.137 0rule 4 permit source 10.209.58.132 0rule 5 permit source 10.209.45.210 0rule 6 permit source 10.209.58.65 0rule 7 permit source 10.209.5.30 0rule 10 deny#aaa

authentication-scheme default

authentication-scheme dot1xscheme  authentication-mode radius

authorization-scheme defaultaccounting-scheme default

accounting-scheme dot1xscheme  accounting-mode radius

domain defaultdomain default_admin

domain radius  authentication-scheme dot1xscheme  accounting-scheme dot1xscheme  radius-server  dot1xserver

local-user admin password cipher %$%$XI]R%H]CF4be-VK0MiqCSXOF%$%$local-user admin privilege level 15     local-user admin service-type ssh Vlanif1#interface Vlanif999ip address 10.209.13.212 255.255.255.224#interface Ethernet0/0/1port link-type accessport default vlan 9#interface Ethernet0/0/2port link-type accessport default vlan 9#interface Ethernet0/0/3port link-type accessport default vlan 11#interface Ethernet0/0/4port link-type accessport default vlan 11#interface Ethernet0/0/5                  port link-type accessport default vlan 10#interface Ethernet0/0/6port link-type accessport default vlan 10#interface Ethernet0/0/7port link-type accessport default vlan 10#interface Ethernet0/0/8port link-type accessport default vlan 10#interface Ethernet0/0/9port link-type accessport default vlan 10#interface Ethernet0/0/10port link-type accessport default vlan 10#interface Ethernet0/0/11                 port link-type accessport default vlan 11#interface Ethernet0/0/12port link-type accessport default vlan 10#interface Ethernet0/0/13port link-type accessport default vlan 10#interface Ethernet0/0/14port link-type accessport default vlan 10#interface Ethernet0/0/15port link-type accessport default vlan 10#interface Ethernet0/0/16port link-type accessport default vlan 10dot1x enable#                                        interface Ethernet0/0/17port link-type accessport default vlan 10#interface Ethernet0/0/18port link-type accessport default vlan 10#interface Ethernet0/0/19port link-type accessport default vlan 10#interface Ethernet0/0/20port link-type accessport default vlan 10#interface Ethernet0/0/21port link-type accessport default vlan 10#interface Ethernet0/0/22port link-type accessport default vlan 11#                                        interface Ethernet0/0/23port link-type accessport default vlan 10#interface Ethernet0/0/24port link-type accessport default vlan 10#interface Ethernet0/0/25port link-type accessport default vlan 11#interface Ethernet0/0/26port link-type accessport default vlan 11#interface Ethernet0/0/27port link-type accessport default vlan 11#interface Ethernet0/0/28port link-type accessport default vlan 11#                                        interface Ethernet0/0/29port link-type accessport default vlan 11#interface Ethernet0/0/30port link-type accessport default vlan 11#interface Ethernet0/0/31port link-type accessport default vlan 11#interface Ethernet0/0/32port link-type accessport default vlan 11#interface Ethernet0/0/33port link-type accessport default vlan 11#interface Ethernet0/0/34port link-type accessport default vlan 11#                                        interface Ethernet0/0/35port link-type accessport default vlan 11#interface Ethernet0/0/36port link-type accessport default vlan 11#interface Ethernet0/0/37port link-type accessport default vlan 11#interface Ethernet0/0/38port link-type accessport default vlan 11#interface Ethernet0/0/39port link-type accessport default vlan 11#interface Ethernet0/0/40port link-type accessport default vlan 11#                                        interface Ethernet0/0/41port link-type accessport default vlan 11#interface Ethernet0/0/42port link-type accessport default vlan 11#interface Ethernet0/0/43port link-type accessport default vlan 11#interface Ethernet0/0/44port link-type accessport default vlan 11#interface Ethernet0/0/45port link-type accessport default vlan 11#interface Ethernet0/0/46port link-type accessport default vlan 11#                                        interface Ethernet0/0/47port link-type accessport default vlan 11#interface Ethernet0/0/48port link-type trunkport trunk allow-pass vlan 2 to 4094#interface GigabitEthernet0/0/1port link-type trunkport trunk allow-pass vlan 2 to 4094undo negotiation auto#interface GigabitEthernet0/0/2port link-type trunkport trunk allow-pass vlan 2 to 4094undo negotiation auto#interface GigabitEthernet0/0/3port link-type trunkport trunk allow-pass vlan 2 to 4094undo negotiation auto#interface GigabitEthernet0/0/4           port link-type trunkport trunk allow-pass vlan 2 to 4094undo negotiation auto#interface NULL0#ip route-static 0.0.0.0 0.0.0.0 10.209.13.193#snmp-agentsnmp-agent local-engineid 000007DB7F000001000071D1snmp-agent community read cipher %$%$8-AMBL6OG=K-Fw.T6m[JTwne%$%$ acl 2001snmp-agent community read cipher %$%$vGtCA.dI8L(i]ROM3g$&+MD;%$%$snmp-agent community read cipher %$%$dE,u(g]xgY)cG{7'bmaL+2)}%$%$snmp-agent sys-info version all#stelnet server enablessh user adminssh user admin authentication-type passwordssh user admin service-type all#user-interface con 0authentication-mode passwordset authentication password cipher %$%$BW2U9\anMA<1+/h67mYXj~L'~cQZ("VMH%$%$user-interface vty 0 4                   authentication-mode aaauser privilege level 15protocol inbound ssh#return[NW_HJ_NACC_5F-3_S3700]

版权声明：本文内容由网络用户投稿，版权归原作者所有，本站不拥有其著作权，亦不承担相应法律责任。如果您发现本站中有涉嫌抄袭或描述失实的内容，请联系我们jiasou666@gmail.com 处理，核实后本网站将在24小时内删除侵权内容。