1-17[Device-isp-aabbcc.net] quit# Configure aabbcc.net as the default domain.[Device] domain default enable aabbcc.net# Enable 802.1X globally.[Device] dot1x# Enable 802.1X for port GigabitEthernet 1/0/1.[Device] interface GigabitEthernet 1/0/1[Device-GigabitEthernet1/0/1] dot1x[Device-GigabitEthernet1/0/1] quit# Set the port access control method. (Optional. The default settings meet the requirement.)[Device] dot1x port-method macbased interface GigabitEthernet 1/0/1Guest VLAN and VLAN Assignment Configuration ExampleNetwork requirementsAs shown in Figure 1-10:z A host is connected to port GigabitEthernet 1/0/2 of the device and must pass 802.1Xauthentication to access the Internet. GigabitEthernet 1/0/2 is in VLAN 1.z The authentication server runs RADIUS and is in VLAN 2.z The update server, which is in VLAN 10, is for client software download and upgrade.z Port GigabitEthernet 1/0/3 of the device, which is in VLAN 5, is for accessing the Internet.As shown in Figure 1-11:z On port GigabitEthernet 1/0/2, enable 802.1X and set VLAN 10 as the guest VLAN of the port. If thedevice sends an EAP-Request/Identity packet from the port for the maximum number of times butstill receives no response, the device adds the port to its guest VLAN. In this case, the host and theupdate server are both in VLAN 10, so that the host can access the update server and downloadthe 802.1X client.As shown in Figure 1-12:z After the host passes the authentication and logs in, the host is added to VLAN 5. In this case, thehost and GigabitEthernet 1/0/3 are both in VLAN 5, so that the host can access the Internet.Figure 1-10 Network diagram for guest VLAN configurationInternetUpdate server Authenticator serverSupplicantVLAN 10GE1/0/1VLAN 1GE1/0/2VLAN 5GE1/0/3VLAN 2GE1/0/4Switch
