Configuration Procedure - H3C S3100 Series Operation Manual

Configuration Procedure

Make sure that the terminals, the servers and the switch are reachable to each other.
If using an external DHCP server, ensure that the terminals can get IP addresses from the server
before and after authentication.
Complete the configuration on the RADIUS server and make sure the authentication, authorization
and accounting functions work normally. In this example, you need to configure on the RADIUS
server an 802.1X user (with username userdot), a Web user (with username userpt) and a MAC
authentication user (with a username and password both being the MAC address of the printer
001588f80dd7).
For information about DHCP, MAC address authentication, and Web authentication, refer to DHCP
Operation, MAC Address Authentication Operation, and Web Authentication Operation.
1) Configure DHCP
# Configure VLANs and IP addresses for the VLAN interfaces, and add ports to specific VLANs
(omitted).
# Enable DHCP.
<Switch> system-view
[Switch] dhcp enable
# Exclude the gateway IP addresses from assignment.
[Switch] dhcp server forbidden-ip 192.168.1.1
[Switch] dhcp server forbidden-ip 2.2.2.1
[Switch] dhcp server forbidden-ip 3.3.3.1
# Configure IP address pool 1, including the address range, lease and gateway address. A short lease
is recommended to shorten the time terminals use to re-acquire IP addresses after passing or failing
authentication.
[Switch] dhcp server ip-pool 1
[Switch-dhcp-pool-1] network 192.168.1.0 mask 255.255.255.0
[Switch-dhcp-pool-1] expired day 0 hour 0 minute 0 second 30
[Switch-dhcp-pool-1] gateway-list 192.168.1.1
[Switch-dhcp-pool-1] quit
# Configure IP address pool 2, including the address range, lease and gateway address. A short lease
is recommended to shorten the time terminals use to re-acquire IP addresses after passing
authentication.
[Switch] dhcp server ip-pool 2
[Switch-dhcp-pool-2] network 2.2.2.0 mask 255.255.255.0
[Switch-dhcp-pool-2] expired day 0 hour 0 minute 0 second 30
[Switch-dhcp-pool-2] gateway-list 2.2.2.1
[Switch-dhcp-pool-2] quit
1-4