华为S系列交换机与cisco命令行对比_V1.1_A_摘要.pptVIP

Page* Radius Server Valid Username Valid Password Permit Invalid Username Invalid Password Stop 802.1x 认证功能 802.1x 交换机上的radius认证功能运行正常 交换机和radius服务器路由可达 前提条件: Intranet Page* 802.1x 认证功能 Huawei 命令行 设置802.1x 认证模式为 (一般 接入用户认证域为default 域) [Quidway] interface GigabitEthernet1/0/1 [Quidway-GigabitEthernet1/0/1] port link-type access [Quidway-GigabitEthernet1/0/1] dot1x [Quidway-GigabitEthernet1/0/1] quit 指定连接用户的端口 使能 802.1x 认证功能 Quidwaysystem-view [Quidway] dot1x 全局使能 802.1x 认证功能 Cisco command Cisco(config)# interface GigabitEthernet1/0/1 Cisco(config-if)# switchport mode access Cisco(config-if)# dot1x port-control auto Cisco(config-if)# exit Cisco# configure terminal Cisco(config)# dot1x system-auth-control Globally enable 802.1x authentication function Specify the port connected to the client that is to be enabled for 802.1x authentication [Quidway-aaa] authentication-scheme default [Quidway-aaa-authen-default] authentication-mode radius [Quidway-aaa-authen-default] quit [Quidway-aaa] accounting-scheme default [Quidway-aaa-accounting-default] accounting-mode radius Cisco(config)# aaa new-model Cisco(config)# aaa authentication dot1x default group radius-group-name Configure 802.1x authentication method as radius (commonly the domain default used to authenticate the access user) Page* ACL Huawei 命令行 创建流行为 [Quidway] traffic classifier classifier-name [Quidway-classifier-name] if-match acl {access-list-number | name} [Quidway-classifier-name ] quit Quidwaysystem-view [Quidway] acl {access-list-number | name} [Quidway-acl-number] rule rule-number {deny | permit} access-condition [Quidway-acl-number] quit 配置ACL Cisco command Cisco# configure terminal Cisco(config)# access-list access-list-number {deny | permit} access-condition Configure an access list 创建匹配ACL的流分类 [Quidway] traffic behavior behavior-name [Quidway-behavior-name] {deny | permit} [Quidway-behavior-name] quit Cisco(config)# ip access-list {standard | extended} name Cisco(config-{std|ext}-nacl)# {