Huawei Quidway S2700 Series Configuration Manual page 84

Quidway S2700 Series Ethernet Switches
Configuration Guide - Security
[Quidway] dot1x enable
Step 6 Verify the configuration.
After the user goes online successfully, ping the HTTP server from the PC to check whether
ACL 3000 takes effect.
[Quidway] ping 101.0.0.2
PING 101.0.0.2: 56 data bytes, press CTRL_C to break
Request time out
Request time out
Request time out
Request time out
Request time out
--- 10.0.0.1 ping statistics ---
5 packet(s) transmitted
0 packet(s) received
100.00% packet loss
----End
Configuration Files
#
sysname Quidway
#
dot1x enable
#
radius-server template rd1
radius-server shared-key cipher 3MQ*TZ,O3KCQ=^Q`MAF4<1!!
radius-server authentication 10.1.1.1 1812
radius-server accounting 100.1.1.2 1813
#
acl number 3000
rule 0 deny ip destination 101.0.0.2 0
#
aaa
authentication-scheme web1
authentication-mode radius
domain isp1
authentication-scheme web1
accounting-scheme web1
radius-server rd1
#
return
Issue 01 (2011-07-15) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
2 NAC Configuration
73