configure terminal
!
interface virtual-template 1
ip address 221.*.*.* 255.255.255.0
dhcp server ip pc 127.0.0.1
bind vlan 2 2 绑定vlan
portal-ip 127.0.0.1
exit
!
interface virtual-template 12
exit
!
interface ethernet 1
send-frame-type Ethernet_II
side net 上连口
no shutdown
ip address 221.*.*.* 255.255.255.252 与上机设备互连地址
exit
!
interface ethernet 2
send-frame-type Ethernet_II
no shutdown
exit
!
interface ethernet 3
no shutdown
exit
!
interface ethernet 4
send-frame-type Ethernet_II
no shutdown
exit
ip route 0.0.0.0 0.0.0.0 221.6.209.25 preference 60
vlan port 2 200 authpolicy bind vlan
!
vpdn-group 1
accept dialin pppoe authentication pap
exit
!
aaa
rule 1 dns 221.*.*.* 0.0.0.0
rule 2 dns2 203.*.*.* 0.0.0.0
ucl-batch 255 1p2p
exit
!
radius host （radius名称
primary-ip 221.*.*.* 1645 1646
second-ip 221.*.*.* 1645 1646
secret-key 密钥
exit
!
ip local pool xz-qqq
router-ip 221.*.*.* 255.255.255.0
dns primary-ip 221.*.*.*
dns second-ip 203.*.2*.*
section 0 221.*.*.2 221.*.*.254
exit
!
aaa
authen scheme qqq radius ''''确认一个名叫qqq的radius认证
authen scheme Local local //一个名叫local 的
authen scheme Pppauth local
acct scheme qqq disable enable -s enable offline offline // 一个qqq的第一个disable 不是本地及非第尔格是radius及非
acct scheme Pppacct enable disable -s disable offline offline
!
domain qqq
set authen-scheme qqq 设置qqq与的 人证方案
set acct-scheme qqq 设置qqq与的 人证方案
set ip-pool xz-qqq 当此与下要求奉陪地址则需要增加本地地址
set radius-scheme nj 设置 radusi人证服务器
set state active 激货与
exit
!
domain local
set ip-pool xz-qqq
set state active
exit
!
domain vlan
set state active
exit
!
domain xz-qqq
set state active
exit
add user aaa@local -p aaa -c active disable A 0 -al disable -pt P
add user qqq@local -p qqq -c active enable A 0 -al disable
add user fuli@local -p fuli -c active disable A 0 -al disable
add user test@local -p 123 -c active enable A 0 -al enable 1 -pt W
add user test1@local -p 123 -c active disable A 4 -al disable
add user xz_qqq_5200f-vlan-00-0002@vlan -p vlan -c active enable A 0 -al disable
exit
!
inner-portal-server
enable
default-file index.html
exit
exit
end
