华为的交换机身份验证配置文件在哪里配置
时间: 2023-07-04 18:24:35 浏览: 253
H3C华为交换机配置基本命令.pdf
5星 · 资源好评率100%
华为的交换机身份验证配置文件可以在交换机的配置模式下使用以下命令进行配置:
1. 创建身份认证域:
```
[Switch] aaa
[Switch-aaa] authentication-scheme scheme-name
[Switch-aaa-authen-scheme-name] authentication-mode {radius | local}
[Switch-aaa-authen-scheme-name] quit
[Switch-aaa] domain domain-name
[Switch-aaa-domain-domain-name] authentication-scheme scheme-name
[Switch-aaa-domain-domain-name] quit
[Switch-aaa] quit
```
2. 创建身份认证用户:
```
[Switch] aaa
[Switch-aaa] local-user user-name password irreversible-cipher password
[Switch-aaa] quit
```
3. 配置端口身份认证:
```
[Switch] interface interface-type interface-number
[Switch-interface-interface-type-interface-number] port default vlan vlan-id
[Switch-interface-interface-type-interface-number] authentication vlan vlan-id
[Switch-interface-interface-type-interface-number] authentication mode {mac-address | mac-address-vlan | dot1x}
[Switch-interface-interface-type-interface-number] quit
```
在实际配置中,需要根据具体的身份认证需求进行相应的配置,以上命令仅供参考。
阅读全文