93
Displaying and maintaining 802.1X
Execute
display
commands in any view and
reset
commands in user view.
Task Command
Display 802.1X session information,
statistics, or configuration information of
specified or all ports.
display
dot1x
[
sessions
|
statistics
] [
interface
interface-type interface-number
]
Display online 802.1X user information.
display dot1x connection
[
interface
interface-type
interface-number
|
slot slot-number
|
user-mac mac-addr
|
user-name name-string
]
Clear 802.1X statistics.
reset
dot1x statistics
[
interface interface-type
interface-number
]
Remove users from the 802.1X guest VLAN
on a port.
reset dot1x guest-vlan interface
interface-type
interface-number
[
mac-address
mac-address
]
802.1X authentication configuration examples
Basic 802.1X authentication configuration example
Network requirements
As shown in
, the access device performs 802.1X authentication for users that connect to
port FortyGigE 1/1/1. Implement MAC-based access control on the port, so the logoff of one user
does not affect other online 802.1X users.
Use RADIUS servers to perform authentication, authorization, and accounting for the 802.1X users.
If RADIUS authentication fails, perform local authentication on the access device.
Configure the host at 10.1.1.1/24 as the primary authentication and accounting servers, and the host
at 10.1.1.2/24 as the secondary authentication and accounting servers. Assign all users to the ISP
domain
bbb
.
Configure the shared key as
name
for packets between the access device and the authentication
server. Configure the shared key as
money
for packets between the access device and the
accounting server.
Figure 31 Network diagram
