| 场景 | 交换机端口准入 |
|---|---|
| 适用 | Cisco Catalyst/IOS-XE |
| 关键命令 | authentication port-control auto、dot1x pae authenticator |
思科 IOS
思科 IOS
aaa new-model
radius server ISE
address ipv4 10.1.1.100 auth-port 1812 acct-port 1813
key 共享密钥
aaa authentication dot1x default group radius
dot1x system-auth-control
interface GigabitEthernet0/1
switchport mode access
authentication port-control auto
dot1x pae authenticator
show authentication sessions interface GigabitEthernet0/1华为 VRP
华为 VRP
dot1x enable
interface GigabitEthernet0/0/1
dot1x enable
dot1x authentication-method eapH3C Comware
H3C Comware
dot1x
interface GigabitEthernet1/0/1
dot1x
dot1x authentication-method eap差异：思科的老式端口命令 dot1x port-control auto 已逐步被 authentication port-control auto 取代，两套命令在不同 IOS 版本并存；华为/H3C 端口命令就是简单的 dot1x enable / dot1x。