交换机上结合IMC做802.1x+Portal 配置案例 提示：建议将WORD显示比例调整为150%查看 1.配置要求：对交换机接入用户做802.1x+Portal认证。 2.网络拓扑：
3.设备端配置： portaldevice]dis ver
H3C Comware Platform Software
Comware Software, Version 5.20, Release 2202P19
Copyright (c 2004-2010 Hangzhou H3C Tech. Co., Ltd. All rights reserved. H3C S5500-28C-EI uptime is 0 week, 0 day, 20 hours, 49 minutes [portaldevice s5500-EI]dis cu #
version 5.20, Release 2202P19
domain default enable ya //指定默认域名，并结合user-name-format without-domain 这条命令，在802.1X时不用带域名。 dot1x //全局开启dot1x功能
portal server szhp ip 172.16.100.200 key szhp url http://172.16.100.200:8080/portal（指定portal页面） vlan 1
vlan 10 # vlan 20 #
radius scheme szh
primary authentication 172.16.100.200 primary accounting 172.16.100.200 key authentication hua key accounting hua
user-name-format without-domain
domain szh //portal配置，引用radius 方案szh. authentication portal radius-scheme szh authorization portal radius-scheme szh accounting portal radius-scheme szh access-limit disable state active idle-cut disable self-service-url disable
domain ya //802.1X配置，引用radius 方案szh. authentication lan-access radius-scheme szh authorization lan-access radius-scheme szh accounting lan-access radius-scheme szh access-limit disable state active idle-cut disable
self-service-url disable #
user-group system #
interface NULL0 #
interface Vlan-interface10
ip address 192.168.10.1 255.255.255.0 #
interface Vlan-interface20 //portal认证VLAN ip address 192.168.20.1 255.255.255.0 portal server szhp method direct #
interface GigabitEthernet1/0/4 port access vlan 20 dot1x
#snmp v3的配置 snmp-agent
snmp-agent local-engineid 800063A203000FE2B23AD7 snmp-agent community read public snmp-agent community write private snmp-agent sys-info version v3
snmp-agent group v3 test_group privacy read-view test_view write-view test_view notify-view test_view
snmp-agent mib-view included test_view iso
snmp-agent usm-user v3 test_user test_group authentication-mode md5 !QM%/G4DG<2=O9\des56 !QM%/G4DG<2=O9\#
2.IMC上关于802.1X的配置：
（1）创建用户姓名：8021xuser
(2给用户姓名添加账号：user802, 密码：***,并与之前创建的服务关联。
（3）用iNODE做客户端验证，先创建一个802.1x连接：
图（1）
图（2）
图（3）此处不带域名需要在设备上指定默认域名（见配置）
图（4）802.1X验证成功
3.IMC关于Portal的配置:
(1接入设备添加：共享密钥:hua ,192.168.10.1为Portal设备和IMC最近的接口IP或者为nas-ip