QTECH QSW-2800 Инструкция по настройке - Manual (Page 345)

+7(495) 797-3311 www.qtech.ru
Москва, Новозаводская ул., 18, стр. 1
331
auto vlan as vlan10.
Ethernet 1/3 is an access port, belongs to vlan10, connects to external internet resources.
To implement this application, the configuration is as follows:
Switch1 configuration:
Enable 802.1x and MAB authentication function globally, configure username and password of
MAB authentication and radius-server address
Switch(config)# dot1x enable
Switch(config)# mac-authentication-bypass enable
Switch(config)#mac-authentication-bypass username-format fixed username mabuser
password mabpwd
Switch(config)#vlan 8-10
Switch(config)#interface vlan 9
Switch(config-if-vlan9)ip address 192.168.61.9 255.255.255.0
Switch(config-if-vlan9)exit
Switch(config)#radius-server authentication host 192.168.61.10
Switch(config)#radius-server accounting host 192.168.61.10
Switch(config)#radius-server key test
Switch(config)#aaa enable
Switch(config)#aaa-accounting enable
Enable the authentication function of each port
Switch(config)#interface ethernet 1/1
Switch(config-if-ethernet1/1)#dot1x enable
Switch(config-if-ethernet1/1)# dot1x port-method portbased
Switch(config-if-ethernet1/1)# dot1x guest-vlan 8
Switch(config-if-ethernet1/1)#exit
Switch(config)#interface ethernet 1/2
Switch(config-if-ethernet1/2)# switchport mode hybrid
Switch(config-if-ethernet1/2)# switchport hybrid native vlan 1
Switch(config-if-ethernet1/2)# switchport hybrid allowed vlan 1;8;10 untag
Switch(config-if-ethernet1/2)# mac-authentication-bypass enable
Switch(config-if-ethernet1/2)# mac-authentication-bypass enable guest-vlan 8
Switch(config-if-ethernet1/2)#exit
Switch(config)#interface ethernet 1/3
Switch(config-if-ethernet1/3)# switchport mode access
Switch(config-if-ethernet1/3)# mac-authentication-bypass enable
Switch(config-if-ethernet1/3)#exit