H3C 交换机802.1x认证配置

dot1x

dot1x authentication-method eap /*默认是chap认证，当时在客户的环境中使用的是默认的chap认证，但是802.1x不通过，改成eap认证就好了*/

interface GigabitEthernet1/0/1

port access vlan 196

dot1x

dot1x mandatory-domain aaa

radius scheme bj_radius

primary authentication 12.2.0.5

primary accounting 12.2.0.5

secondary authentication 12.2.0.6

secondary authentication 12.2.0.1

secondary accounting 12.2.0.6

secondary accounting 12.2.0.1

key authentication simple bjfh20.2.0.0

key accounting simple bjfh20.2.0.0

user-name-format without-domain

nas-ip 12.2.8.20

quit

domain aaa

authentication lan-access radius-scheme bj_radius none

authorization lan-access radius-scheme bj_radius none

accounting lan-access radius-scheme bj_radius none

quit

domain default enable aaa

Radius服务器的设置请参考文档