H3C switch 802.1x authentication configuration

Dot1x

Dot1x authentication-method eap / * defaults to chap authentication. At that time, the default chap authentication was used in the customer's environment, but 802.1x did not pass, so it would be fine to change it to eap authentication * /

Interface GigabitEthernet1/0/1

Port access vlan 196

Dot1x

Dot1x mandatory-domain aaa

Radius scheme bj_radius

Primary authentication 12.2.0.5

Primary accounting 12.2.0.5

Secondary authentication 12.2.0.6

Secondary authentication 12.2.0.1

Secondary accounting 12.2.0.6

Secondary accounting 12.2.0.1

Key authentication simple bjfh20.2.0.0

Key accounting simple bjfh20.2.0.0

User-name-format without-domain

Nas-ip 12.2.8.20

Quit

Domain aaa

Authentication lan-access radius-scheme bj_radius none

Authorization lan-access radius-scheme bj_radius none

Accounting lan-access radius-scheme bj_radius none

Quit

Domain default enable aaa

Please refer to the documentation for setting up the Radius server.