H3CWX系列來賓用戶訪問管理8021X本地認(rèn)證方式配置舉例

H3CWX系列來賓用戶訪問管理802.1X本地認(rèn)證方式配置舉例此資料來自弱電家園網(wǎng)原文出處請查看：/html/2013-11-23/201311232092616366.html本文檔還包括web該配置的方式請在后面查看配置信息#服務(wù)模板下采用開放認(rèn)證方式，該配置是缺省配置<AC>displaycurrent-configuration#version5.20,Release2102#sysnameAC#domaindefaultenablesystem#telnetserverenable#port-securityenable#dot1xauthentication-methodeap#aclnumber3000rule10permitipdestination540#vlan1#domainsystemaccess-limitdisablestateactiveidle-cutdisableself-service-urldisable#pkientityh3ccommon-nameh3c#pkidomainh3ccaidentifierh3c-cacertificaterequestfromracertificaterequestentityh3ccrlcheckdisable#user-groupsystem#local-useradminpasswordsimpleadminauthorization-attributelevel3service-typetelnetlocal-userguestpasswordsimpleguestauthorization-attributeacl3000service-typelan-accessservice-typeportalexpiration-date00:00:00-2010/01/31local-userstaffpasswordsimple123service-typelan-accessservice-typeportal#wlanrrmdot11amandatory-rate61224dot11asupported-rate918364854dot11bmandatory-rate12dot11bsupported-rate5.511dot11gmandatory-rate125.511dot11gsupported-rate69121824364854#wlanservice-template1cryptossidcompanybindWLAN-ESS0cipher-suitetkipsecurity-iewpaservice-templateenable#sslserver-policyaccess-policypki-domainh3c#eap-profiledefault-profilessl-server-policyaccess-policymethodmd5methodtlsmethodpeap-mschapv2#interfaceNULL0#interfaceVlan-interface1ipaddress20#interfaceGigabitEthernet1/0/1#interfaceGigabitEthernet1/0/2#interfaceGigabitEthernet1/0/3#interfaceGigabitEthernet1/0/4#interfaceM-Ethernet1/0/0#interfaceTen-GigabitEthernet1/0/5#interfaceTen-GigabitEthernet1/0/6#interfaceWLAN-ESS0portlink-typehybridporthybridvlan1untaggedmac-vlanenableport-securityport-modeuserlogin-secure-extport-securitytx-key-type11keyundodot1xhandshakeundodot1xmulticast-trigger#wlanap2600modelWA2620E-AGNserial-idh3c004radio1channelautomax-power19radio2channelautomax-power20service-template1radioenable#snmp-agentsnmp-agentlocal-engineid800063A203000FE207F2E0snmp-agentsys-infoversionv3#local-serverauthenticationeap-profiledefault-profile#loadxml-configuration#user-interfacecon0user-interfacevty04authentication-modeschemeuserprivilegelevel3#returnAC原有配置采用802.1x本地認(rèn)證的方式，內(nèi)部員工可以通過staff用戶登錄，并訪問全部內(nèi)網(wǎng)信息，以下配置為添加guest用戶之前AC上的原有配置。<AC>displaycurrent-configuration#version5.20,Release2102#sysnameAC#domaindefaultenablesystem#telnetserverenable#port-securityenable#dot1xauthentication-methodeap#vlan1#domainsystemaccess-limitdisablestateactiveidle-cutdisableself-service-urldisable#pkientityh3ccommon-nameh3c#pkidomainh3ccaidentifierh3c-cacertificaterequestfromracertificaterequestentityh3ccrlcheckdisable#user-groupsystem#local-useradminpasswordsimpleadminauthorization-attributelevel3service-typetelnetlocal-userstaffpasswordsimple123service-typelan-accessservice-typeportal#wlanrrmdot11amandatory-rate61224dot11asupported-rate918364854dot11bmandatory-rate12dot11bsupported-rate5.511dot11gmandatory-rate125.511dot11gsupported-rate69121824364854#wlanservice-template1cryptossidcompanybindWLAN-ESS0cipher-suitetkipsecurity-iewpaservice-templateenable#sslserver-policyaccess-policypki-domainh3c#eap-profiledefault-profilessl-server-policyaccess-policymethodmd5methodtlsmethodpeap-mschapv2#interfaceNULL0#interfaceVlan-interface1ipaddress20#interfaceGigabitEthernet1/0/1#interfaceGigabitEthernet1/0/2#interfaceGigabitEthernet1/0/3#interfaceGigabitEthernet1/0/4#interfaceM-Ethernet1/0/0#interfaceTen-GigabitEthernet1/0/5#interfaceTen-GigabitEthernet1/0/6#interfaceWLAN-ESS0portlink-typehybridporthybridvlan1untaggedport-securityport-modeuserlogin-secure-extport-securitytx-key-type11keyundodot1xhandshakeundodot1xmulticast-trigger#wlanap2600modelWA2620E-AGNserial-idh3c004radio1channelautomax-power19radio2channelautomax-power20service-template1radioenable#snmp-agentsnmp-agentlocal-engineid800063A203000FE207F2E0snmp-agentsys-infoversionv3#local-serverauthenticationeap-profiledefault-profile#loadxml-configuration#user-interfacecon0user-interfacevty04authentication-modeschemeuserprivilegelevel3#return#version5.20,Release2102#sysnameH3C#domaindefaultenablesystem#telnetserverenable#port-securityenable#dot1xauthentication-methodeap#vlan1#domainsystemaccess-limitdisablestateactiveidle-cutdisableself-service-urldisable#pkientityh3ccommon-nameh3c#pkidomainh3ccaidentifierh3c-cacertificaterequestfromracertificaterequestentityh3ccrlcheckdisable#user-groupsystem#local-useradminpasswordsimpleadminauthorization-attributelevel3service-typetelnetlocal-userstaffpasswordsimple123service-typelan-accessservice-typeportal#wlanrrmdot11amandatory-rate61224dot11asupported-rate918364854dot11bmandatory-rate12dot11bsupported-rate5.511dot11gmandatory-rate125.511dot11gsupported-rate69121824364854#wlanservice-template1cryptossidcompanybindWLAN-ESS0cipher-suitetkipsecurity-iewpaservice-templateenable#sslserver-policyaccess-policypki-domainh3c#eap-profiledefault-profilessl-server-policyaccess-policymethodmd5methodtlsmethodpeap-mschapv2#interfaceNULL0#interfaceVlan-interface1ip