Filter
Top Products
DES-7200 Configuration Guide Chapter 5 DHCP Relay Configuration
5-17
z Access users belonging to different VLANs access Internet after Dot1x
authentication, and RADIUS Server assigns different access privileges to
different users.
z DHCP Server can allocate IP addresses to users according to the privilege
of authenticated user.
5.6.3 Configuration Tips
1. Configure basic DHCP Relay: On Switch A, configure the address of DHCP
Server (10.1.1.2/24) and enable DHCP Server. After configuration, the user can
acquire dynamic IP address across the network segment.
2. Configure 802.1X authentication: On Switch A, enable 802.1X
authentication and set the user ports to controlled ports (Gi 0/3 and Gi 0/4).
After configuration, the user will need to pass Dot1x authentication before
accessing Internet.
3. Configure the assignment of privilege-based IP address: On Switch A,
enable DHCP Option dot1x and configure IP authorization mode as DHCP
Server mode. After configuration, the DHCP Server can allocate IP addresses
according to user's privilege.
Note
1. Relevant configurations of 802.1X are detailed in "802.1X
Configuration"
2. The realization of this example also needs the configuration
of RADIUS Server and DHCP Server. For relevant details,
please refer to the relevant documents.
5.6.4 Configuration Steps
Configure Switch A
Step 1: Configure the address of user gateway and the address of server
interface.
! Configure the VLANs corresponding to Gi 0/3 and Gi 0/4 and configure the SVI
corresponding to each VLAN.
DES-7200#configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
DES-7200(config)#interface gigabitEthernet 0/3
DES-7200(config-if-GigabitEthernet 0/3)#switchport access vlan 10
DES-7200(config-if-GigabitEthernet 0/3)#exit
DES-7200(config)#interface gigabitEthernet 0/4
DES-7200(config-if-GigabitEthernet 0/4)#switchport access vlan 20
DES-7200(config-if-GigabitEthernet 0/4)#exit