





{"id":1700,"date":"2011-01-24T01:39:11","date_gmt":"2011-01-24T05:39:11","guid":{"rendered":"http:\/\/www.killtest.hk\/?p=1700"},"modified":"2011-01-24T01:39:11","modified_gmt":"2011-01-24T05:39:11","slug":"cisco-802","status":"publish","type":"post","link":"https:\/\/www.killtest.hk\/index.php\/cisco\/cisco-802\/","title":{"rendered":"cisco\u5b78\u7fd2-\u5728cisco\u8def\u7531\u5668\u4e0a\u914d\u7f6e802.1x\u8a8d\u8b49"},"content":{"rendered":"<p>\u901a\u904e\u914d\u7f6e802.1x\u8a8d\u8b49\u6709\u54ea\u4e9b\u7528\u8655\u5462\uff1f\u672c\u6587\u4e3b\u8981\u5f9e802.1x\u7684\u8a8d\u8b49\u914d\u7f6e\u548c\u5be6\u73fe\u8a73\u7d30\u7684\u8b1b\u8ff0\u4e86\u914d\u7f6e\u539f\u7406\u548c\u61c9\u7528\u904e\u7a0b\u3002\u540c\u6642\u5c0d\u65bc\u914d\u7f6e\u7684\u64cd\u4f5c\u7d66\u51fa\u4e86\u914d\u7f6e\u547d\u4ee4\u3002<\/p>\n<p>\u3000\u3000\u8981\u4f7f\u7528\u57fa\u65bc\u7aef\u53e3\u7684\u8a8d\u8b49\uff0c\u5247\u4ea4\u63db\u6a5f\u548c\u7528\u6236PC\u90fd\u8981\u652f\u6301802.1x\u6a19\u6e96\uff0c\u4f7f\u7528\u5c40\u57df\u7db2\u4e0a\u7684\u53ef\u64f4\u5c55\u8a8d\u8b49\u5354\u8b70\uff08EAPOL\uff09\uff0c802.1x EAPOL\u662f\u4e8c\u5c64\u5354\u8b70\uff0c\u5982\u679c\u4ea4\u63db\u6a5f\u7aef\u53e3\u4e0a\u914d\u7f6e\u4e86802.1x\uff0c\u90a3\u9ebd\u7576\u5728\u7aef\u53e3\u4e0a\u6aa2\u6e2c\u5230\u8a2d\u5099\u5f8c\uff0c\u8a72\u7aef\u53e3\u9996\u5148\u8655\u65bc\u672a\u8a8d\u8b49\u72c0\u614b\uff0c\u7aef\u53e3\u5c07\u4e0d\u8f49\u767c\u4efb\u4f55\u6d41\u91cf\uff08\u9664\u4e86CDP\uff0cSTP\u548cEAPOL\uff09\uff0c\u6b64\u6642\u5ba2\u6236PC\u53ea\u80fd\u4f7f\u7528EAPOL\u5354\u8b70\u8207\u4ea4\u63db\u6a5f\u901a\u4fe1\uff0c\u6211\u5011\u9700\u8981\u518d\u5ba2\u6236PC\u4e0a\u5b89\u88dd\u652f\u6301802.1x\u7684\u61c9\u7528\u7a0b\u5e8f\uff08windows\u652f\u6301802.1x\uff09\uff0c\u58f9\u65e6\u7528\u6236\u901a\u904e\u8a8d\u8b49\u5247\u8a72\u7aef\u53e3\u958b\u59cb\u8f49\u767c\u6578\u64da\u6d41\u3002\u7528\u6236\u8a3b\u92b7\u6642\u4ea4\u63db\u6a5f\u7aef\u53e3\u5c07\u8fd4\u56de\u672a\u8a8d\u8b49\u72c0\u614b\uff1b\u6216\u8005\u7576\u5ba2\u6236\u9577\u6642\u9593\u6c92\u6709\u6578\u64da\u6d41\u91cf\u6642\uff0c\u6703\u56e0\u8d85\u6642\u505c\u6b62\u8a8d\u8b49\u72c0\u614b\uff0c\u9700\u8981\u7528\u6236\u91cd\u65b0\u8a8d\u8b49\u3002<\/p>\n<p>\u3000\u3000\u518d\u4ea4\u63db\u6a5f\u4e0a\u914d\u7f6e802.1x\u9700\u8981\u7528\u5230RADIUS\u670d\u52d9\u5668\uff0c\u5728\u9019\u88cf\u8a3b\u610f\u58f9\u4e0b\uff0cAAA\u53ef\u4ee5\u7528RADIUS\u548cTACACS+\u5be6\u73fe\uff0c\u4f46802.1x\u53ea\u652f\u6301RADIUS\u8a8d\u8b49\u3002<\/p>\n<p>\u3000\u3000\u4f86\u770b\u58f9\u4e0b\u914d\u7f6e\uff1a<\/p>\n<p>\u3000\u3000\uff08config\uff09#aaa new-model\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 &#8216;\u555f\u52d5AAA\u3002<\/p>\n<p>\u3000\u3000\uff08config\uff09#radius-server host 192.168.1.100 key netdigedu &#8216;\u914d\u7f6eRADIUS\u670d\u52d9\u5668\u5730\u5740\u53ca\u5bc6\u9470\u3002<\/p>\n<p>\u3000\u3000\uff08config\uff09#aaa authentication dot1x default group radius\u00a0\u00a0\u00a0\u00a0 &#8216;\u914d\u7f6e802.1x\u9ed8\u8a8d\u8a8d\u8b49\u65b9\u6cd5RADIU\u3002<\/p>\n<p>\u3000\u3000\uff08config\uff09#dot1x system-auth-control\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 &#8216;\u5728\u4ea4\u63db\u6a5f\u4e0a\u5168\u5c40\u555f\u7528802.1x\u8a8d\u8b49\u3002<\/p>\n<p>\u3000\u3000\uff08config\uff09#int fa0\/24<\/p>\n<p>\u3000\u3000\uff08config-if\uff09#switchport mode access<\/p>\n<p>\u3000\u3000\uff08config-if\uff09#dot1x port-control auto\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 &#8216;\u8a2d\u7f6e\u63a5\u53e3\u7684802.1x\u72c0\u614b\u3002<\/p>\n<p>\u3000\u3000\u72c0\u614b\u6709\u4e09\u7a2e\uff1a<\/p>\n<p>\u3000\u3000force-authorized\uff1a\u7aef\u53e3\u59cb\u7d42\u8655\u65bc\u8a8d\u8b49\u72c0\u614b\u4e26\u8f49\u767c\u6d41\u91cf\uff0c\u9019\u500b\u662f\u9ed8\u8a8d\u72c0\u614b\u3002<\/p>\n<p>\u3000\u3000force-unauthorized\uff1a\u7aef\u53e3\u59cb\u7d42\u8655\u65bc\u672a\u8a8d\u8b49\u72c0\u614b\u4e26\u4e0d\u80fd\u8f49\u767c\u6d41\u91cf\u3002<\/p>\n<p>\u3000\u3000auto\uff1a\u7aef\u53e3\u901a\u904e\u4f7f\u7528802.1x\u8207\u5ba2\u6236\u7aef\u4ea4\u63db\u6d88\u606f\u5728\u8a8d\u8b49\u548c\u672a\u8a8d\u8b49\u72c0\u614b\u9593\u5207\u63db\u3002\u9019\u500b\u662f\u6211\u5011\u9700\u8981\u7684\uff0c\u6240\u4ee5dot1x port-control \u547d\u4ee4\u5f8c\u58f9\u5b9a\u8981\u7528auto\u3002<\/p>\n<p>\u3000\u3000\uff08config-if\uff09#dot1x host-mode multi-host\u00a0\u00a0\u00a0\u00a0\u00a0 &#8216;\u4ea4\u63db\u6a5f\u7aef\u53e3\u4e0b\u9023\u63a5\u591a\u81faPC\u6642\uff08\u901a\u904eHub\u6216\u4ea4\u63db\u6a5f\uff09\u9700\u8981\u914d\u7f6e\u9019\u500b\u547d\u4ee4\uff0c\u9ed8\u8a8d\u53ea\u652f\u6301\u5c0d\u58f9\u81faPC\u8a8d\u8b49\u3002<\/p>\n<p>\u3000\u3000#show dot1x all\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 &#8216;\u67e5\u770b802.1x\u914d\u7f6e\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u901a\u904e\u914d\u7f6e802.1x\u8a8d\u8b49\u6709\u54ea\u4e9b\u7528\u8655\u5462\uff1f\u672c\u6587\u4e3b\u8981\u5f9e802.1x\u7684\u8a8d\u8b49\u914d\u7f6e\u548c\u5be6\u73fe\u8a73\u7d30\u7684\u8b1b\u8ff0\u4e86\u914d\u7f6e\u539f\u7406\u548c\u61c9\u7528\u904e\u7a0b\u3002\u540c [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[702,2747,434],"class_list":["post-1700","post","type-post","status-publish","format-standard","hentry","category-cisco","tag-802-1x","tag-cisco","tag-434"],"_links":{"self":[{"href":"https:\/\/www.killtest.hk\/index.php\/wp-json\/wp\/v2\/posts\/1700","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.killtest.hk\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.killtest.hk\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.killtest.hk\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.killtest.hk\/index.php\/wp-json\/wp\/v2\/comments?post=1700"}],"version-history":[{"count":0,"href":"https:\/\/www.killtest.hk\/index.php\/wp-json\/wp\/v2\/posts\/1700\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.killtest.hk\/index.php\/wp-json\/wp\/v2\/media?parent=1700"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.killtest.hk\/index.php\/wp-json\/wp\/v2\/categories?post=1700"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.killtest.hk\/index.php\/wp-json\/wp\/v2\/tags?post=1700"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}