dot1x
dot1x authentication-method eap /*默认是chap认证，当时在客户的环境中使用的是默认的chap认证，但是802.1x不通过，改成eap认证就好了*/
interface GigabitEthernet1/0/1
port access vlan 196
dot1x
dot1x mandatory-domain aaa
radius scheme bj_radius
primary authentication 12.2.0.5
primary accounting 12.2.0.5
secondary authentication 12.2.0.6
secondary authentication 12.2.0.1
secondary accounting 12.2.0.6
secondary accounting 12.2.0.1
key authentication simple bjfh20.2.0.0
key accounting simple bjfh20.2.0.0
user-name-format without-domain
nas-ip 12.2.8.20
quit
domain aaa
authentication lan-access radius-scheme bj_radius none
authorization lan-access radius-scheme bj_radius none
accounting lan-access radius-scheme bj_radius none
quit
domain default enable aaa
Radius服务器的设置请参考文档
原创文章，作者：carmelaweatherly，如若转载，请注明出处：https://blog.ytso.com/tech/safety/219762.html