一、配置網絡設備（華爲篇）
1、配置核心交換機（華爲S7712）
sysnameCore-Switch 更改主機名
vlan batch 31 32 222 223 批量創建vlan
int vlan 32 創建管理vlan 32虛擬接口
ip address 172.16.32.254 24 配置管理vlan 32 網關地址
int vlan 31 創建服務器vlan 31虛擬接口
ip address 172.16.31.254 24 配置服務器vlan 31 網關地址
int vlan 222 創建業務vlan 222虛擬接口
ip address 172.16.222.254 24 配置業務vlan 222 網關地址
dhcp select relay
dhcp relay server-ip 172.16.31.66
配置DHCP中繼服務器爲172.16.31.66
int vlan 223 創建業務vlan 223虛擬接口
ip address 172.16.223.254 24 配置業務vlan 223 網關地址
dhcp select relay
dhcp relay server-ip 172.16.31.66
配置DHCP中繼服務器爲172.16.31.66
開啓DHCP服務
dhcp enable
G10/0/1端口配置
int G10/0/1
description To 802.1x Switch-G1/0/24
port link-type trunk
porttrunk pvid vlan 32
porttrunk allow-pass vlan all
G10/0/2接口配置
int G10/0/2
description To Server Switch-G0/0/48
portlink-type trunk
porttrunk pvid vlan 32
porttrunk allow-pass vlan all
2、配置服務器端交換機（S5700）
sysname Server Switch 更改主機名
vlan batch 31 32 創建vlan 31、32
int Vlan 32 創建管理VLAN 32虛擬接口
ip address 172.16.32.25224 配置管理IP地址
配置默認路由
ip route 0.0.0.0 0.0.0.0 172.16.32.254
上聯端口G0/0/48配置
interfaceGigabitEthernet0/0/1
description ToCore-Switch-G10/0/2
port link-typeaccess
port defaultvlan 31
連接服務器端口G0/0/1配置
interfaceGigabitEthernet0/0/1
description ToWindows Server 2008
port link-typeaccess
port defaultvlan 31
3、配置接入交換機 (華爲)
sysname 802.1x Switch 更改主機名
vlan batch 32 222to 223 批量創建VLAN 32 222和223
int Vlan 32 創建管理VLAN 32虛擬接口
ip address 172.16.32.25324
配置管理IP爲172.16.32.254/24
創建radius模版
radius-server template test.com
radius-servershared-key simple test.com
radius-serverauthentication 172.16.31.66 1812
radius-server accounting 172.16.31.66 1813
radius-server retransmit 2
undoradius-server user-name domain-included
配置aaa
aaa
authentication-scheme test.com
authentication-mode radius
authorization-scheme test.com
accounting-scheme test.com
accounting-mode radius
domain test.com
authentication-scheme test.com
accounting-scheme test.com
authorization-scheme test.com
radius-server test.com
配置默認域
domain test.com
全局開啓dot1x
dot1x enable
配置dot1x驗證方式
dot1x authentication-method eap
開啓DHCP服務
dhcp enable
配置默認路由
ip route 0.0.0.0 0.0.0.0 172.16.32.254
配置接入的端口G0/0/1
interface GigabitEthernet0/0/1
description To Dynamic 802.1x-huan.yan-PC
interface GigabitEthernet0/0/1
port hybrid pvid vlan 222
undoport hybrid vlan 1
porthybrid untagged vlan 222
dot1xenable
配置接入的端口G0/0/2
interface GigabitEthernet0/0/2
description To Dynamic 802.1x-obama-PC
port hybrid pvid vlan 222
undoport hybrid vlan 1
porthybrid untagged vlan 222
dot1xenable
配置上聯端口G0/0/24
interface GigabitEthernet0/0/24
description To Core-Switch-G10/0/1
port link-type trunk
porttrunk pvid vlan 32
porttrunk allow-pass vlan 2 to 4094
華爲配置比華三配置繁瑣些~