迈普交换机802.1X有线配置

迈普交换机

MP2816

1. 定义Radius认证服务器

1. aaa new-model
2. aaa group server radius radius_group
3. server-private ip_address_radius1 auth-port 1812 acct-port 1813 priority 0 key string
4. server-private ip_address_radius2 auth-port 1812 acct-port 1813 priority 1 key string
5. ip radius source-interface source-interface
6. radius-server retransmit 3 //默认配置
7. radius-server timeout 5 //默认配置
8. radius-server dead-time 5

2. 配置AAA认证方式

1. aaa authentication connection default radius_group none

3. 全局开启802.1X认证

1. dot1x enable //默认配置
2. dot1x eap-relay enable
3. dot1x client-probe enable
4. no dot1x reauthentication

4. 端口启用802.1X认证

1. port port
2. dot1x port-control enable
3. dot1x port-method macbased //默认配置

MP4100E系列

1. 定义Radius认证服务器

1. aaa new-model
2. aaa group server radius radius_group
3. server-private ip_address_radius1 auth-port 1812 acct-port 1813 priority 0 key string
4. server-private ip_address_radius2 auth-port 1812 acct-port 1813 priority 1 key string
5. ip radius source-interface source-interface
6. radius-server retransmit 3 //默认配置
7. radius-server timeout 5 //默认配置
8. radius-server dead-time 5

2. 配置AAA认证方式

1. aaa authentication connection default radius_group none

3. 全局开启802.1X认证

1. aaa authentication connection default radius_group none

3. 端口启用802.1X认证

1. port port
2. port-type nni
3. dot1x eap-relay enable
4. dot1x port-control enable
5. dot1x client-probe enable
6. no dot1x reauthentication
7. dot1x port-method macbased //默认配置

MP4100F系列

1. 定义Radius认证服务器

1. radius-server authentication host ip_address_radius1 port 1812 key string primary access-mode dot1x
2. radius-server authentication host ip_address_radius2 port 1812 key string access-mode dot1x
3. radius nas-ipv4 ip_address
4. radius-server retransmit 3 //默认配置
5. radius-server timeout 5
6. radius-server dead-time 5

2. 配置AAA认证方式

1. aaa enable
2. authentication dot1x radius none

3. 全局开启802.1X认证

1. dot1x enable
2. dot1x macbased port-down-flush
3. no dot1x re-authentication //默认配置

4. 端口启用802.1X认证

1. interface interface
2. dot1x enable
3. dot1x port-control auto //默认配置
4. dot1x port-method macbased
5. dot1x max-user macbased 256 //默认最大允许接入用户数为1，建议调成最大值256