15.H3C端口隔离
1.认证方式
- 基于端口的认证方式
- 基于MAC的认证方式
2.开启802.1x认证功能
开启802.1x认证功能
[H3C]dot1x [H3C]interface GigabitEthernet 1/0/1 [H3C-GigabitEthernet1/0/1]dot1x配置用户
[H3C]local-user wuqun class ? manage Device management user network Network access user [H3C]local-user wuqun class network [H3C-luser-network-wuqun]service-type lan-access [H3C-luser-network-wuqun]password simple 123模拟器
[H3C]interface GigabitEthernet 1/0/1 [H3C-GigabitEthernet1/0/1]undo stp enable
3.端口隔离基本配置
创建隔离组
[H3C]port-isolate group 1将指定端口加入到隔离组中，端口成为隔离组的普通端口
[H3C-GigabitEthernet1/0/2]port-isolate enable group 1