H3C 交換機(jī)802.1x認(rèn)證配置

dot1x

dot1x authentication-method eap  /*默認(rèn)是chap認(rèn)證，當(dāng)時(shí)在客戶的環(huán)境中使用的是默認(rèn)的chap認(rèn)證，但是802.1x不通過，改成eap認(rèn)證就好了*/

interface GigabitEthernet1/0/1

 port access vlan 196

 dot1x

 dot1x mandatory-domain aaa

radius scheme bj_radius

 primary authentication 12.2.0.5

 primary accounting 12.2.0.5

 secondary authentication 12.2.0.6

 secondary authentication 12.2.0.1

 secondary accounting 12.2.0.6

 secondary accounting 12.2.0.1

 key authentication simple bjfh20.2.0.0

 key accounting simple bjfh20.2.0.0

 user-name-format without-domain

 nas-ip 12.2.8.20

 quit

domain aaa  

 authentication lan-access radius-scheme bj_radius none 

 authorization lan-access radius-scheme bj_radius none

 accounting lan-access radius-scheme bj_radius none

 quit

domain default enable aaa

Radius服務(wù)器的設(shè)置請(qǐng)參考文檔