802.1x认证失败配置(guest vlan)
原创
©著作权归作者所有:来自51CTO博客作者a371933136的原创作品,请联系作者获取转载授权,否则将追究法律责任
##华三 guest vlan 配置
#
interface GigabitEthernet1/0/2
port access vlan 10
dot1x
undo dot1x handshake
dot1x port-method portbased
dot1x mandatory-domain dot1x
dot1x guest-vlan 1001
##华为 统一模式
authentication-profile name dot1x
dot1x-access-profile dot1x
access-domain dot1x dot1x
authentication event authen-fail action authorize vlan 1001
//上面这个测试有些问题
//authentication event pre-authen action authorize service-scheme
//用这个来做更靠谱,预连接功能需开启
##华为 传统模式
#
undo authentication unified-mode
#
interface GigabitEthernet1/0/2
port link-type hybrid
port hybrid pvid vlan 10
port hybrid untagged vlan 10 1001
dot1x domain dot1x
dot1x enable
authentication guest-vlan 1001
//传统模式使用guest-vlan接口类型改为hybird