H3C S5600 Series Operation Manual page 583

Network diagram
Figure 2-6 Network diagram for Auto VLAN configuration
PC
L2 switch
IP phone
PC
Hub
IP phone
Configuration procedure
Configuration on the RADIUS server
The configuration may vary on different RADIUS servers. Configure VLAN lists on the RADIUS server
by referring to Configuring dynamic VLAN list
Configuration on 802.1x clients
The configuration may vary on different 802.1x clients. Configure 802.1x clients by referring to related
802.1x client configuration guides.
Configuration on the authentication switch
<Switch> system-view
# Configure the authentication scheme.
[Switch] radius scheme bbb
[Switch-radius-bbb] primary authentication 1.1.1.1
[Switch-radius-bbb] key authentication hello
[Switch-radius-bbb] primary accounting 1.1.1.1
[Switch-radius-bbb] key accounting hello
[Switch-radius-bbb] quit
# Create authentication domain aaa, and then enter domain view.
[Switch] domain aaa
# Configure the VLAN assignment mode in domain aaa as VLAN list.
[Switch-isp-aaa] vlan-assignment-mode vlan-list
# Specify the authentication scheme for the domain.
[Switch-isp-aaa] radius-scheme bbb
[Switch-isp-aaa] quit
# Configure the authentication scheme.
[Switch] radius scheme bbb
[Switch-radius-bbb] primary authentication 1.1.1.1
[Switch-radius-bbb] key authentication hello
[Switch-radius-bbb] primary accounting 1.1.1.1
[Switch-radius-bbb] key accounting hello
# Enable 802.1X authentication on Switch.
IP network
Eth1/0/2
Switch
Eth1/0/1
RADIUS server
assignment.
2-34