配置注释案例.docVIP

配置案例 H3Cdis cur # sysname H3C # domain default enable xjykd……………………………………….…..默认启用的域 # loopback-detection enable # dot1x.........................全局启用dot1x认证 dot1x url 44:8080/selfservice/download.html...................认证服务器地址 dot1x free-ip ......................无需认证认证的地址段 # radius scheme system radius scheme xjykd…………………………………..……认证服务域名 server-type extended……………………………..……….域的服务类型 primary authentication 44.....................主认证服务器地址 primary accounting 44.........................主账号服务器地址 security-policy-server 44.....................安全策略服务器地址 key authentication xjykd..................................验证关键字 key accounting xjykd......................................验证账号关键字 user-name-format without-domain nas-ip 00................................网络访问服务器地址，需与本机管理ip相同 # domain system domain xjykd scheme radius-scheme xjykd…………………………..调度域认证服务器 # local-user admin................................建立本地用户 password simple admin..........................密码 service-type telnet............................服务类型 level 3 local-user supervisor password simple xj123456 service-type telnet level 3 # vlan 1 # vlan 500.......................................建立vlan # vlan 1000………………………..建立vlan # interface Vlan-interface1000 ip address 00 ........................本机管理地址 # interface Aux1/0/0 # interface Ethernet1/0/1 flow-control.................................端口下启用流量控制 port access vlan 500.........................将端口划入vlan500 port isolate.................................端口隔离，即使属于同一vlan的2台机子亦不能互访 loopback-detection enable dot1x........................................端口下启用dot1x认证 line-rate outbound 1024......................端口限速出流量为1M # interface Ethernet1/0/2 flow-control port access vlan 500 port isolate loopback-detection enable dot1x line-rate outbound 1024 # interface Ethernet1/0/3 flow-control port access vlan 500 port isolate loopback-detection enable dot1x line-rate outbound 1024 # interface Ethernet1/0/4 flow-co