H3C Technologies H3C S3100 Series Switches - Manual (Page 358)

5-14
[SwitchB-radius-scheme1] primary accounting 2::1
[SwitchB-radius-scheme1] key accounting 321123
[SwitchB-radius-scheme1] user-name-format without-domain
[SwitchB-radius-scheme1] quit
# Create an ISP domain domain1; reference scheme1 for the authentication, and accounting for LAN
users; specify domain1 as the default ISP domain.
[SwitchB] domain domain1
[SwitchB-isp-domian1] authentication lan-access radius-scheme scheme1
[SwitchB-isp-domian1] accounting lan-access radius-scheme scheme1
[SwitchB-isp-domian1] quit
[SwitchB] domain default enable domain1
# Globally enable 802.1x and then enable it on Ethernet 1/0/2 and Ethernet 1/0/3 respectively.
[SwitchB] dot1x
[SwitchB] interface ethernet 1/0/2
[SwitchB-Ethernet1/0/2] dot1x
[SwitchB-Ethernet1/0/2] quit
[SwitchB] interface ethernet 1/0/3
[SwitchB-Ethernet1/0/3] dot1x
[SwitchB-Ethernet1/0/3] quit
4) Configure RADIUS server
On the RADIUS server, configure the parameters related to Switch B. For details, refer to the
configuration manual of the RADIUS server.
5) Verify the configuration
After the configurations, the hosts initiate 802.1x authentication. After passing the authentication, Host
A sends report messages to join IPv6 multicast groups FF1E::101 and FF1E::102. Use the display
mld-snooping group command to display information about MLD snooping multicast groups. For
example:
# Display information about IGMP snooping multicast groups in VLAN 103 on Switch B.
[SwitchB] display mld-snooping group vlan 103 verbose
Total 1 IP Group(s).
Total 1 IP Source(s).
Total 1 MAC Group(s).
Port flags: D-Dynamic port, S-Static port, C-Copy port
Subvlan flags: R-Real VLAN, C-Copy VLAN
Vlan(id):103.
Total 1 IP Group(s).
Total 1 IP Source(s).
Total 1 MAC Group(s).
Router port(s):total 1 port.
Eth1/0/1 (D) ( 00:01:30 )
IP group(s):the following ip group(s) match to one mac group.
IP group address:FF1E::101
(::, FF1E::101):
Attribute: Host Port
Host port(s):total 1 port.
Eth1/0/3 (D) ( 00:04:10 )
MAC group(s):