2-6
# Configure the switch to delete the user domain name from the user name and then send
the user name to the RADIUS sever.
[Sysname-radius-radius1] user-name-format without-domain
[Sysname-radius-radius1] quit
# Create the user domain test.net and specify radius1 as its RADIUS server group.
[Sysname] domain test.net
[Sysname-isp-test.net] radius-scheme radius1
[Sysname-isp-test.net] quit
# Create advanced ACL 3000 to permit IP packets destined for any IP address.
[Sysname] acl number 3000
[Sysname-acl-adv-3000] rule 1 permit ip destination any
[Sysname-acl-adv-3000] quit
# Define a QoS profile example to limit the rate of matched packets to 128 kbps and drop
the packets exceeding the rate limit.
[Sysname] qos-profile example
[Sysname-qos-profile-example] traffic-limit inbound ip-group 3000 128 exceed drop
# Enable the 802.1x function.
[Sysname] dot1x
[Sysname] dot1x interface GigabitEthernet1/0/1
The QoS profile example will be applied to the user with user name someone
automatically after the user passes the authentication.
To Next Page
Loading...
