DES-7200 Configuration Guide Chapter 5 DHCP Relay Configuration
5-18
DES-7200(config)#interface vlan 10
DES-7200(config-if-VLAN 10)#ip address 192.168.10.1 255.255.255.0
DES-7200(config-if-VLAN 10)#exit
DES-7200(config)#interface vlan 20
DES-7200(config-if-VLAN 20)#ip address 192.168.20.1 255.255.255.0
DES-7200(config-if-VLAN 20)#exit
! Configure the interface address of DHCP Server and RADIUS Server.
DES-7200(config)#interface gigabitEthernet 0/1
DES-7200(config-if-GigabitEthernet 0/1)#no switchport
DES-7200(config-if-GigabitEthernet 0/1)#ip address 10.1.1.1 255.255.255.0
DES-7200(config-if-GigabitEthernet 0/1)#exit
DES-7200(config)#interface gigabitEthernet 0/2
DES-7200(config-if-GigabitEthernet 0/2)#no switchport
DES-7200(config-if-GigabitEthernet 0/2)#ip address 10.1.2.1 255.255.255.0
DES-7200(config-if-GigabitEthernet 0/2)#exit
Step 2: Configure relevant features of DHCP Relay.
! Configure the address of DHCP server as 10.1.1.2/24 and enable DHCP
service.
DES-7200(config)#ip helper-address 10.1.1.2
DES-7200(config)#service dhcp
! Enable DHCP Option dot1x.
DES-7200(config)#ip dhcp relay information option dot1x
Step 3: Configure 802.1X relevant features.
! Enable AAA and configure the address of Radius Server as 10.1.2.2/24;
configure Radius Key as "DES-7200".
DES-7200(config)#aaa new-model
DES-7200(config)#radius-server host 10.1.2.2
DES-7200(config)#radius-server key DES-7200
! Create Dot1x authentication method list named "d1x" and configure Dot1x to
apply such authentication method list.
DES-7200(config)#aaa authentication dot1x d1x group radius
DES-7200(config)#dot1x authentication d1x
! Configure ports Gi 0/3 and Gi 0/4 as controlled ports.
DES-7200(config)#interface range gigabitEthernet 0/3-4
DES-7200(config-if-range)#dot1x port-control auto
DES-7200(config-if-range)#exit
! Configure IP authorization mode as DHCP Server mode.