Filter
Top Products
DES-7200 Configuration Guide Chapter 4 802.1x Configuration
4-59
Configure 802.1X authentication and configure the device port for client access as
controlled port;
Enable dynamic VLAN assignment on the corresponding interface;
Create VLANs to join after user authentication.
4.5.2.4 Configuration Steps
Step 1: Configure relevant attributes of Radius Server
Step 2: Configure access switch "SwitchA"
! Turn on AAA switch
DES-7200(config)#aaa new-model
! Configure RADIUS server
DES-7200(config)#radius-server host 192.168.32.120
! Configure RADIUS key
DES-7200(config)#radius-server key DES-7200
! Configure dot1x authentication method list
DES-7200(config)#aaa authentication dot1x hello group radius
! Apply dot1x authentication method list
DES-7200(config)#dot1x authentication hello
! Configure 802.1X accounting method list
DES-7200(config)#aaa accounting network jizhang start-stop group radius
! Apply 802.1X accounting method list
DES-7200(config)#dot1x accounting jizhang
! Configure the port as controlled port (enable port-based authentication)
DES-7200(config)#interface range fastEthernet 0/1-23
DES-7200(config-if-range)#dot1x port-control auto
! Enable dynamic VLAN assignment on the corresponding interface
DES-7200(config-if-range)# dot1x dynamic-vlan enable
! Create VLANs to join after user authentication
DES-7200(config)#vlan 2
DES-7200(config-vlan)#name development
DES-7200(config-vlan)#exit
DES-7200(config)#vlan 3
DES-7200(config-vlan)#name finance
DES-7200(config-vlan)#exit
DES-7200(config)#vlan 4
DES-7200(config-vlan)#name market
DES-7200(config-vlan)#exit
! Configure uplink port F0/24 as the trunk port.
DES-7200(config)#interface fastEthernet 0/24