【文章內容簡介】 lt group radius/*VLAN分配必須*/radiusserver host key vrv /*指定 radius服務器地址為，通信密鑰為 vrv，端口不用制定，默認 1812和 1813*/radiusserver vsa send authentication /*配置 VLAN分配必須使用 IETF所規(guī)定的 VSA值*/int vlan 1 ip add no shut/*為交換機配置管理地址，以便和 radius服務器通信*/int range f0/1 11dot1x portcontrol auto switchport mode access /*為 1到 11端口配置 dot1x，12 端口不配*/dot1x guestvlan ID （VLAN 跳轉命令）exit/*退回全局配置模式*/dot1x systemauthcontrol/*全局啟動 dot1x*/2950交換機上 VLAN的配置vlan databasevlan IDenableconfig tint range f0/1 – 20switchport access vlan IDswitchport mode accessspanningtree portfast2. 華為 3COM 3628配置dis cu sysname H3C domain default enable test dot1x dot1x timer txperiod 10 dot1x retry 4 radius scheme system radius scheme test servertype standard primary authentication primary accounting key authentication vrv key accounting vrv usernameformat withoutdomain domain system domain test scheme radiusscheme test vlanassignmentmode string vlan 1 vlan 46 vlan 600 description guest vlan 601 to 602 interface Vlaninterface46 ip address interface Aux1/0/0 interface Ether1/0/1