!HammerOS system config file

 hostname u24

!Syslog config

!Stack config

!Port config

 config port 1 learning disable    /*設備開啟802.1x后將自動關閉端口的地址學習功能*/

 config port 2 learning disable

 config port 3 learning disable

 config port 4 learning disable

 config port 5 learning disable

 config port 6 learning disable

 config port 7 learning disable

 config port 8 learning disable

 config port 9 learning disable

 config port 10 learning disable

 config port 11 learning disable

 config port 12 learning disable

 config port 13 learning disable

 config port 14 learning disable             

 config port 15 learning disable

 config port 16 learning disable

 config port 17 learning disable

 config port 18 learning disable

 config port 19 learning disable

 config port 20 learning disable

 config port 21 learning disable

 config port 22 learning disable

 config port 23 learning disable

 config port 24 learning disable

!Vlan config

 config ipaddress 192.168.2.254 255.255.255.0 /*設置設備的治理IP地址*/

!Arp config

!STPD config

!FDB entry config

 create fdbentry 00053b8015ed port 24      /*在24端口靜態設置上聯三層設備的MAC地址*/

!Igmp snooping config

!Mirroring config

!Traceroute config

!Sntp config

!Timezone config

!Rstp config

!Dot1x config

 config dot1x enable                    /*開啟802.1x認證功能*/

 config port 1 dot1x port-control-mode port-based  /*設定1-23端口打開認證，認證模式為

 config port 2 dot1x port-control-mode port-based   基于端口認證 */

 config port 3 dot1x port-control-mode port-based

 config port 4 dot1x port-control-mode port-based

 config port 5 dot1x port-control-mode port-based

 config port 6 dot1x port-control-mode port-based

 config port 7 dot1x port-control-mode port-based

 config port 8 dot1x port-control-mode port-based

 config port 9 dot1x port-control-mode port-based

 config port 10 dot1x port-control-mode port-based

 config port 11 dot1x port-control-mode port-based

 config port 12 dot1x port-control-mode port-based

 config port 13 dot1x port-control-mode port-based

 config port 14 dot1x port-control-mode port-based

 config port 15 dot1x port-control-mode port-based

 config port 16 dot1x port-control-mode port-based

 config port 17 dot1x port-control-mode port-based

 config port 18 dot1x port-control-mode port-based

 config port 19 dot1x port-control-mode port-based

 config port 20 dot1x port-control-mode port-based

 config port 21 dot1x port-control-mode port-based

 config port 22 dot1x port-control-mode port-based

 config port 23 dot1x port-control-mode port-based

 config port 24 dot1x authcontrolledportcontrol forceunauth /*24口作為上聯口不認證*/

 config dot1x keepalive enable

!Port bind config

!RADIUS client config

 radius authentication add-server id 0 server-ip 192.168.110.252 client-ip 192.168.2.254 udp-port 1812  /*設定認證服務器為192.168.110.252，使用UDP端口1812*/

 radius authentication config-server id 0 shared-secret 123456

      /*設定認證服務器交換信息密碼123456 */

 radius accounting add-server id 0 server-ip 192.168.110.252 client-ip 192.168.2.254 udp-port 1813

      /*設定計費服務器為192.68.110.252，使用UDP端口1813*/

 radius accounting config-server id 0 shared-secret 123456

      /*設定計費服務器交換信息的密碼為123456*/

 radius authentication enable   /*開啟認證服務器*/

 radius accounting enable     /*開啟計費服務器*/

 config isp-domain default authentication type pap /*設定與認證服務器的加密方式為PAP*/

 config isp-domain default authentication config-server id 0 type PRimary

 config isp-domain default accounting config-server id 0 type primary

!Loop detect config

!Dot1p config

!BroadcastLimit config

!Bandwidth config

!User manage config

!SNMP config

!Web manage service config

!IP route config

 ip route 0.0.0.0 0.0.0.0 192.168.2.254  /*指定治理地址的網關*/

!H.Link config

!Network access-control service config

!lldp config

!!End of config