Zte ZXR10 5900 Series - DOT1 X Maintenance and Diagnosis; DOT1 X Multiple Domains Function

ZXR105900/5200SeriesUserManual(BasicCongurationVolume)
ZXR10(config-nas)#aaa1multiple-hostsenable
ZXR10(config-nas)#aaa1default-ispzte163.net
ZXR10(config-nas)#aaa1fullaccountdisable
ZXR10(config-nas)#aaa1radius-serveraccounting1
ZXR10(config-nas)#createlocaluser1nameA0001
ZXR10(config-nas)#localuser1mac00d0.d0d0.1234
ZXR10(config-nas)#localuser1accountingenable
ZXR10(config-nas)#createlocaluser2nameA0002
ZXR10(config-nas)#localuser2mac00d0.d0d0.1456
ZXR10(config-nas)#localuser2accountingenable
ZXR10(config-nas)#createlocaluser3nameA0003
ZXR10(config-nas)#localuser3mac00d0.d0d0.1689
ZXR10(config-nas)#localuser3accountingenable
Intheaboveconguration,thelocalauthenticationfunctionon
theZXR105900/5200isenabledtoimplementtheapplicationre-
quirementoftheenterprise.Accordingtotheaboveconguration,
only00d0.d0d0.1234,00d0.d0d0.1456and00d0.d0d0.1689net-
workcardaddressescanbeaccessedandtheInternetaccessdu-
rationofthesethreeusers,namedasA0001,A0002andA0003,
issummedup.ThedurationisrecordedontheRadiusserver .
DOT1XMultipleDomainsFunction
InFigure29andFigure30applicationsGuestVlanfunctionisbased
oninterface.Whenuserauthenticationattheportsucceeds,in-
terfacewillbeswitchedinauthenticationVLAN.andotherusers
whicharenotunauthorizedcan’tvisitGuestVlaninternalresource.
Whenallauthenticationusersattheportareofine,portcanre-
coverattributeofGuestVlan.Ifoneauthenticationuserexistson
theporttheportcan’trecoverattributeofGuestVlan.Thisap-
plicationcanbeimplementedon5900/5200switch.InFigure29
andFigure30,authenticatorapplies5900/5200,thecongura-
tionexampleof5900/5200isasfollows.
ZXR10(config)#nas
ZXR10(config-nas)#createaaa1portgei_1/1
ZXR10(config-nas)#aaa1controldot1xenable
ZXR10(config-nas)#aaa1authenticationlocal
ZXR10(config-nas)#createlocaluser1nameA0001
ZXR10(config-gei_1/1)#vlanjumpenabledefaultauthvlan20
Intheaboveconguration,localauthenticationfunctionon
5900/5200isappliedtomeetmanagerapplicationrequirement.
DOT1XMaintenanceand
Diagnosis
WhenencounteringDOT1Xproblem,wecanlocatethefaultand
removethemwithrelevantdebuggingcommands.Amongthese
commands,showcommandanddebugcommandmaybeused.
1.TodisplayDot1xauthenticationcongurationinformation,use
thefollowingcommand.
showdot1x
140CondentialandProprietaryInformationofZTECORPORATION