DES-7200 Configuration Guide Chapter 4 802.1x Configuration
4-62
Enable dynamic VLAN assignment on the corresponding interface;
Configure whether or not enable guest VLAN on the corresponding interface.
4.5.3.4 Configuration Steps
Configure access switch "SwitchA":
! Configure the VLANs to which the port belong:
DES-7200(config)#interface fastEthernet 0/3
DES-7200(config-if-FastEthernet 0/3)#switchport access vlan 10
DES-7200(config-if-FastEthernet 0/3)#exit
DES-7200(config)#interface fastEthernet 0/24
DES-7200(config-if-FastEthernet 0/24)#switchport access vlan 2
DES-7200(config-if-FastEthernet 0/24)#exit
! Turn on AAA switch
DES-7200(config)#aaa new-model
! Configure RADIUS server
DES-7200(config)#radius-server host 192.168.32.120
! Configure RADIUS key
DES-7200(config)#radius-server key DES-7200
! Configure dot1x authentication method list
DES-7200(config)#aaa authentication dot1x hello group radius
! Apply dot1x authentication method list
DES-7200(config)#dot1x authentication hello
! Configure 802.1X accounting method list
DES-7200(config)#aaa accounting network jizhang start-stop group radius
! Apply 802.1X accounting method list
DES-7200(config)#dot1x accounting jizhang
! Configure the port as controlled port (enable port-based authentication)
DES-7200(config)#interface fastEthernet 0/1
DES-7200(config-if-FastEthernet 0/1)#dot1x port-control auto
! Enable dynamic VLAN assignment on the corresponding interface
DES-7200(config-if-FastEthernet 0/1)# dot1x dynamic-vlan enable
! Enable GUEST VLAN assignment on the interface
DES-7200(config-if-FastEthernet 0/1)#dot1x guest-vlan 10
! Configure the default route of device
DES-7200(config)#ip route 0.0.0.0 0.0.0.0 192.168.217.1
! Configure the IP address of device
DES-7200(config)#interface vlan 1
DES-7200(config-if-VLAN 1)#ip address 192.168.217.81 255.255.255.0