HP A5500 SI Switch Series User Manual

275
# Create an ISP domain domain1; reference scheme1 for the authentication, authorization, and
accounting for LAN users; specify domain1 as the default ISP domain.
[SwitchA] domain domain1
[SwitchA-isp-domian1] authentication lan-access radius-scheme scheme1
[SwitchA-isp-domian1] authorization lan-access radius-scheme scheme1
[SwitchA-isp-domian1] accounting lan-access radius-scheme scheme1
[SwitchA-isp-domian1] quit
[SwitchA] domain default enable domain1
# Globally enable 802.1X and then enable it on GigabitEthernet 1/0/1 and GigabitEthernet 1/0/2
respectively.
[SwitchA] dot1x
[SwitchA] interface gigabitethernet 1/0/1
[SwitchA-GigabitEthernet1/0/1] dot1x
[SwitchA-GigabitEthernet1/0/1] quit
[SwitchA] interface gigabitethernet 1/0/2
[SwitchA-GigabitEthernet1/0/2] dot1x
[SwitchA-GigabitEthernet1/0/2] quit
3. Configure Switch B
# Globally enable MLD snooping.
<SwitchB> system-view
[SwitchB] mld-snooping
[SwitchB-mld-snooping] quit
# Create VLAN 100, assign GigabitEthernet 1/0/1 through GigabitEthernet 1/0/3 to this VLAN, and
enable MLD snooping in this VLAN.
[SwitchB] vlan 100
[SwitchB-vlan100] port gigabitethernet 1/0/1 to gigabitethernet 1/0/3
[SwitchB-vlan100] mld-snooping enable
[SwitchB-vlan100] quit
# Create a user profile profile2 and configure the user profile so that users can join or leave only one
IPv6 multicast group, FF1E::101. Then, enable the user profile.
[SwitchB] acl ipv6 number 2001
[SwitchB-acl6-basic-2001] rule permit source ff1e::101 128
[SwitchB-acl6-basic-2001] quit
[SwitchB] user-profile profile2
[SwitchB-user-profile-profile2] mld-snooping access-policy 2001
[SwitchB-user-profile-profile2] quit
[SwitchB] user-profile profile2 enable
# Create a RADIUS scheme scheme2; set the service type for the RADIUS server to extended; specify the
IP addresses of the primary authentication/authorization server and accounting server as 3::1; set the
shared keys to 321123; specify that a username sent to the RADIUS server carry no domain name.
[SwitchB] radius scheme scheme2
[SwitchB-radius-scheme2] server-type extended
[SwitchB-radius-scheme2] primary authentication 3::1
[SwitchB-radius-scheme2] key authentication 321123
[SwitchB-radius-scheme2] primary accounting 3::1
[SwitchB-radius-scheme2] key accounting 321123

HP A5500 SI Switch Series Specifications

General

Layer Support	Layer 2 and Layer 3
MAC Address Table	16K entries
Routing Protocol	RIP, OSPF, BGP, IS-IS
Management	Web, CLI, SNMP
Input Voltage	100-240 V AC
Operating Temperature	0°C to 45°C
Ports	48 x 10/100/1000 ports, 4 x 10-Gigabit SFP+ ports
Dimensions	440 x 430 x 44 mm
Weight	5.5 kg
Operating Humidity	10% to 95% (non-condensing)