H3C Technologies H3C S7500E Series Switches - Manual (Page 125)

6-4
EAD Fast Deployment Configuration Example
Network requirements
As shown in Figure 6-1 , the host is connected to the device, and the device is connected to the
freely accessible network segment and outside network.
It is required that:
z Before successful 802.1X authentication, if you use a web browser to access the outside
network, the host is redirected to the web server, and can download and install the 802.1X
client software.
z After successful 802.1X authentication, the host can access the outside network.
Figure 6-1 Network diagram for EAD fast deployment
Configuration procedure
1) Configure the web server
Before using the EAD fast deployment function, you need to configure the web server to
provide the download service of 802.1X client software.
2) Configure the device to support EAD fast deployment
# Configure the IP addresses of the interfaces (omitted).
# Configure the free IP.
system-view
[Device] dot1x free-ip 192.168.2.0 24
# Configure the redirect URL for client software download.
[Device] dot1x url http://192.168.2.3
# Enable 802.1X globally.
[Device] dot1x
# Enable 802.1X on the port.
[Device] interface gigabitethernet 2/0/1
[Device-GigabitEthernet2/0/1] dot1x
3) Verify your configuration
# Use the ping command to ping an IP address within the network segment specified by free IP
to check that the user can access that segment before passing 802.1X authentication.
C:\>ping 192.168.2.3