[ISCW]802.1X认证

3550交换机配置如下

hostname sw                   
aaa new-model                  开启aaa
aaa authentication dot1x default group radius local            
aaa authorization network default group radius local

dot1x system-auth-control                  开启dot1x系统认证模式

interface FastEthernet0/1
switchport mode access
no ip address
dot1x port-control auto                  
dot1x reauthentication                  dot1x再次验证
spanning-tree portfast                  开启portfast模式

interface Vlan1
ip address 192.168.10.2 255.255.255.0

radius-server host 192.168.10.15 auth-port 1812 acct-port 1813 key server77
radius-server retransmit 3
radius-server optional-passwords
radius-server key server77
radius-server vsa send authentication

ACS服务器配置如下

客户端PC机配置