2950 SSH、AutoQos、802.1x with VLAN等配置实例

王朝other·作者佚名  2008-05-31
窄屏简体版  字體: |||超大  

12.1(12C)EA1新特性:

SSH支持:

crypto key generate rsa

ip ssh authentication-retries 3

ip ssh timeout30

AutoQos,仅EI特性集可使用:

int fa0/24

auto qos voip cisco-phone

int g0/1

auto qos voip trust

可以通过Radius对802.1x的端口分配VLAN:

switch端:

aaa new-model

aaa authen dot1x default group radius

aaa author network default group radius

radius-server host 10.1.1.1 auth-port 1912 key hehehe

int fa0/1

dot1x port-control auto

radius server端:

[64]Tunnel-Type=VLAN

[65]Tunnle-Medium-Type=802

[66]Tunnel-Private-Group-ID= VLAN NAME

dot1x可以和port security同时配置在同一端口上:

aaa new-model

aaa authen dot1x default group radius

aaa author network default group radius

radius-server host 10.1.1.1 auth-port 1912 key hehehe

int fa0/1

dot1x port-control auto

dot1x multiple-hosts

switchport mode Access

switchport port--security

switchport port--security max 10

switchport port--security mac-add sticky

switchport port--security violation protect

DOT1X可以和Voice VLAN配置在同一端口上:

aaa new-model

aaa authen dot1x default group radius

aaa author network default group radius

radius-server host 10.1.1.1 auth-port 1912 key hehehe

int fa0/1

dot1x port-control auto

switchport mode access

switchport access vlan 10

switcport voice vlan 25

spanning-tree portfast

12.1(13)EA1的新特性:

支持SPAN;

支持PVRST+(rapid的STP)

作者:juechen70

 
 
 
免责声明:本文为网络用户发布,其观点仅代表作者个人观点,与本站无关,本站仅提供信息存储服务。文中陈述内容未经本站证实,其真实性、完整性、及时性本站不作任何保证或承诺,请读者仅作参考,并请自行核实相关内容。
 
 
© 2005- 王朝網路 版權所有 導航