Configuration Guide 802.1x Configuration
! Configure dot1x authentication method list
Ruijie(config)#aaa authentication dot1x hello group radius
! Apply dot1x authentication method list
Ruijie(config)#dot1x authentication hello
! Configure 802.1X accounting method list
Ruijie(config)#aaa accounting network jizhang start-stop group radius
! Apply 802.1X accounting method list
Ruijie(config)#dot1x accounting jizhang
! Configure the port as controlled port (enable port-based authentication)
Ruijie(config)#interface range fastEthernet 0/1-23
Ruijie(config-if-range)#dot1x port-control auto
! Enable dynamic VLAN assignment on the corresponding interface
Ruijie(config-if-range)# dot1x dynamic-vlan enable
! Create VLANs to join after user authentication
Ruijie(config)#vlan 2
Ruijie(config-vlan)#name development
Ruijie(config-vlan)#exit
Ruijie(config)#vlan 3
Ruijie(config-vlan)#name finance
Ruijie(config-vlan)#exit
Ruijie(config)#vlan 4
Ruijie(config-vlan)#name market
Ruijie(config-vlan)#exit
! Configure uplink port F0/24 as the trunk port.
Ruijie(config)#interface fastEthernet 0/24
Ruijie(config-if-FastEthernet 0/24)#switchport mode trunk
! Configure the default route of device
Ruijie(config)#ip route 0.0.0.0 0.0.0.0 192.168.217.1
! Configure the IP address of device
Ruijie(config)#interface vlan 1
Ruijie(config-if-VLAN 1)#ip address 192.168.217.81 255.255.255.0
Step 3: Use client to complete authentication. After successful authentication, the CLI will display:
"%DOT1X-4-TRANS_AUTHOR: Setting interface FastEthernet 0/1 author-vlan 2 succeeded."
We can see that the user has been assigned to VLAN2.
To Next Page
Loading...
