HP A5500 SI Switch Series Configuration Manual page 288

Hide thumbs Also See for A5500 SI Switch Series:
Table of Contents

Advertisement

[SwitchB-radius-scheme2] user-name-format without-domain
[SwitchB-radius-scheme2] quit
# Create an ISP domain domain2; reference scheme2 for the authentication, authorization, and
accounting for LAN users; specify domain2 as the default ISP domain.
[SwitchB] domain domain2
[SwitchB-isp-domian2] authentication lan-access radius-scheme scheme2
[SwitchB-isp-domian2] authorization lan-access radius-scheme scheme2
[SwitchB-isp-domian2] accounting lan-access radius-scheme scheme2
[SwitchB-isp-domian2] quit
[SwitchB] domain default enable domain2
# Globally enable 802.1X and then enable it on GigabitEthernet 1/0/2 and GigabitEthernet 1/0/3
respectively.
[SwitchB] dot1x
[SwitchB] interface gigabitethernet 1/0/2
[SwitchB-GigabitEthernet1/0/2] dot1x
[SwitchB-GigabitEthernet1/0/2] quit
[SwitchB] interface gigabitethernet 1/0/3
[SwitchB-GigabitEthernet1/0/3] dot1x
[SwitchB-GigabitEthernet1/0/3] quit
Configure RADIUS server
4.
On the RADIUS server, configure the parameters related to Switch A and Switch B. For more
information, see the configuration guide of the RADIUS server.
Verify the configuration
5.
After the configurations, the two multicast sources and hosts initiate 802.1X authentication. After passing
the authentication, Source 1 sends multicast flows to FF1E::101 and Source 2 sends multicast flows to
FF1E::102; Host A sends report messages to join IPv6 multicast groups FF1E::101 and FF1E::102. Use
the display mld-snooping group command to display information about MLD snooping groups. For
example:
# Display information about MLD snooping groups in VLAN 100 on Switch B.
[SwitchB] display mld-snooping group vlan 100 verbose
Total 1 IP Group(s).
Total 1 IP Source(s).
Total 1 MAC Group(s).
Port flags: D-Dynamic port, S-Static port, C-Copy port
Subvlan flags: R-Real VLAN, C-Copy VLAN
Vlan(id):100.
Total 1 IP Group(s).
Total 1 IP Source(s).
Total 1 MAC Group(s).
Router port(s):total 1 port(s).
GE1/0/1
IP group(s):the following ip group(s) match to one mac group.
IP group address:FF1E::101
(::, FF1E::101):
Attribute:
(D) ( 00:01:30 )
Host Port
276

Hide quick links:

Advertisement

Table of Contents
loading

This manual is also suitable for:

A5500 ei switch series

Table of Contents