H3C交换机dot1X+AD+IAS+CA配置实验(分享错误经历)三

3、 IAS 及客户机不同的认证方式配置
经过多次试验,对交换机、 IAS 和客户机之间的认证方式总结了如下规律,不一定完全正确,还请各位帮忙验证
````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````
交换机认证方式           IAS配置        
dot1x authentication-method  
````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````
Chap                                                            远程访问策略配置文件
                 身份验证中选择 chap
````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````
pap                                                              远程访问策略配置文件
                 身份验证中选择 pap
````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````
Eap                                                              远程访问策略配置文件
                 身份验证中无需选择
                 只要在EAP方法中添加
                 与客户机认证匹配的方法即可
````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````
 
 
 
````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````
客户机认证方式            IAS配置
````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````
md5质询                  远程访问策略配置文件EAP方法中
                  选择MD5质询  
````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````
受保护的EAP           远程访问策略配置文件EAP方法中
                  选择受保护的EAP
````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````
智能卡或其它证书          远程访问策略配置文件EAP方法中
                  选择智能卡或其它证书
 
总结交换机与IAS,客户机与IAS认证方式可以交叉,互相之间并不影响。
本文出自 “ 乱窜的猫真实可靠” 博客,请务必保留此出处 http://catcity.blog.51cto.com/310698/59943

你可能感兴趣的:(分享,经历,交换机,实验,IAS)