实验5交换机端口安全技术(2018.4.16)

一．配置802.1x

步骤1：
[swa]dot1x
[swa]interface GigabitEthernet 1/0/1
[swa-GigabitEthernet1/0/1]dot1x
步骤2：交换机启用802.1x协议并创建本地用户
[swa]local-user abc class network
New local user added.
[swa-luser-network-abc]service-type lan-access
[swa-luser-network-abc]password simple 123

协商一致后，Pca可以ping通Pcb

二．配置端口隔离

步骤1：
[H3C]port-isolate group 1
[H3C-GigabitEthernet1/0/1]port-isolate enable group 1
[H3C-GigabitEthernet1/0/2]port-isolate enable group 1

步骤2：
[H3C]display port-isolate group 1
Port isolation group information:
Group ID: 1
Group members:
GigabitEthernet1/0/1 GigabitEthernet1/0/2