H3C交换机dot1X+AD+IAS+CA配置实验（分享错误经历）三

2008-01-19 10:35:23

３、IAS 及客户机不同的认证方式配置

经过多次试验，对交换机、IAS和客户机之间的认证方式总结了如下规律，不一定完全正确，还请各位帮忙验证

````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````

交换机认证方式　　　　　　　　　　　ＩＡＳ配置　　　　　　　　

dot1x authentication-method　

````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````

Chap 远程访问策略配置文件

　　　　　　　　　　　　　　　　　身份验证中选择chap

````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````

pap 远程访问策略配置文件

　　　　　　　　　　　　　　　　　身份验证中选择pap

````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````

Eap 远程访问策略配置文件

　　　　　　　　　　　　　　　　　身份验证中无需选择

　　　　　　　　　　　　　　　　　只要在ＥＡＰ方法中添加

　　　　　　　　　　　　　　　　　与客户机认证匹配的方法即可

````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````

客户机认证方式　　　　　　　　　　　　ＩＡＳ配置

````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````

ｍｄ５质询　　　　　　　　　　　　远程访问策略配置文件ＥＡＰ方法中

　　　　　　　　　　　　　　　　　　选择ＭＤ５质询　　

````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````

受保护的ＥＡＰ　　　　　　　　　　　远程访问策略配置文件ＥＡＰ方法中

　　　　　　　　　　　　　　　　　　选择受保护的ＥＡＰ

````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````

智能卡或其它证书　　　　　　　　　　远程访问策略配置文件ＥＡＰ方法中

　　　　　　　　　　　　　　　　　　选择智能卡或其它证书

总结交换机与ＩＡＳ，客户机与ＩＡＳ认证方式可以交叉，互相之间并不影响。