Figure 15-10 Network diagram for guest VLAN configuration
Configuration procedure
The following configuration steps include configurations of AAA and RADIUS. For details about these
commands, refer to AAA Command. The configurations on the 802.1X client and the RADIUS server
are omitted.
# Configure RADIUS scheme 2000.
<Switch> system-view
[Switch] radius scheme 2000
[Switch-radius-2000] primary authentication 10.11.1.1 1812
[Switch-radius-2000] primary accounting 10.11.1.1 1813
[Switch-radius-2000] key authentication abc
[Switch-radius-2000] key accouting abc
[Switch-radius-2000] user-name-format without-domain
[Switch-radius-2000] quit
# Configure the ISP domain and apply the scheme 2000 to the domain.
[Switch] domain system
[Switch-isp-system] scheme radius-scheme 2000
[Switch-isp-system] quit
# Set the username type for MAC authentication to MAC address that requires no hyphened lowercase
MAC addresses as the username and password.
[Switch] mac-authentication authmode usernameasmacaddress usernameformat without-hyphen
# Configure the ISP domain for MAC authentication.
[Switch] mac-authentication domain system
15-24