H3C S7500 Series Ethernet Switches Release 3135 DHCP Configuration Examples

802.1x Configuration Examples
H3C S7500 Series Ethernet Switches Release 3135
Chapter 3 Enterprise Network Access
Authentication Configuration Example
3-1
Chapter 3 Enterprise Network Access
Authentication Configuration Example
 Note:
The configuration or information displayed may vary with devices. The following takes
the H3C S7500 series switch (using software Release 3135) as an example.
3.1 Network Application Analysis
An administrator of an enterprise network needs to authenticate users accessing the
network on a per-port basis on the switch to control access to network resources.
Table
3-1 shows the details of network application analysis.
Table 3-1 Network application analysis
Network requirements Solution
Access of users is controlled by
authentication.
Enable 802.1x
Users can only access VLAN 10 before
the authentication succeeds.
Enable Guest VLAN
Users can access VLAN 100 after the
authentication succeeds.
Enable dynamic VLAN assignment
Users select the monthly payment service
of 50 dollars and use 2M bandwidth to
access the network.
Configure an accounting policy and
bandwidth restraint policy on the
RADIUS server
IP address and MAC address are bound
after a user logs in.
Set MAC-to-IP binding
Tear down the connection by force if it is
idle for 20 minutes.
Enable idle cut
Users can be re-authenticated
successfully after the switch reboots
abnormally.
Enable re-authentication upon reboot