H3C LS-5100-16P-SI-OVS-H3 Configuration page 303

H3C Low-End Ethernet Switches Configuration Examples
ARP Attack Prevention
[SwitchB-radius-cams] key authentication expert
# Specify usernames sent to the RADIUS server to exclude the domain name.
[SwitchB-radius-cams] user-name-format without-domain
# Specify the service type as extended.
[SwitchB-radius-cams] server-type extended
[SwitchB-radius-cams] quit
# Create ISP domain host and reference RADIUS scheme cams.
[SwitchB] domain host
[SwitchB-isp-host] radius-scheme cams
[SwitchB-isp-host] quit
# Set ISP domain host as the default ISP domain.
[SwitchB] domain default enable host
# Enable 802.1x globally.
[SwitchB] dot1x
# Enable 802.1x on Ethernet 1/0/2, Ethernet 1/0/3, and Ethernet 1/0/4.
[SwitchB] interface Ethernet1/0/2
[SwitchB-Ethernet1/0/2] dot1x
[SwitchB-Ethernet1/0/2] quit
[SwitchB] interface Ethernet1/0/3
[SwitchB-Ethernet1/0/3] dot1x
[SwitchB-Ethernet1/0/3] quit
[SwitchB] interface Ethernet1/0/4
[SwitchB-Ethernet1/0/4] dot1x
[SwitchB-Ethernet1/0/4] quit
# Configure a default route to Gateway.
[SwitchB] ip route-static 0.0.0.0 0 192.168.1.1
III. Configure Gateway
<Gateway> system-view
# Create VLAN 10 and VLAN 20, and add corresponding ports into the VLANs.
[Gateway] vlan 10
[Gateway–vlan10] port Ethernet 1/0/1
[Gateway–vlan10] quit
[Gateway] vlan 20
[Gateway–vlan20] port Ethernet 1/0/2
[Gateway–vlan20] quit
# Configure the IP address of VLAN-interface 10 as 192.168.0.1/24.
[Gateway] interface vlan 10
Chapter 2 Configuration Examples
2-10