Настройка 802.1x и MAC-авторизации через RADIUS-server на MES1024/1124/2124/3100

Пример конфигурации комматутора:

gi 0/7 - mac авторизация;
gi 0/8 - mac авторизация с назначением VLAN;
gi 0/18 - 802.1x авторизация.

no spa
vlan database
vlan 100,200
exit
dot1x system-auth-control
!
aaa authentication dot1x default radius none
radius-server host 192.168.1.10 encrypted key da90833f59be
!
interface gigabitethernet 1/0/17
switchport access vlan 100
exit
!
interface gigabitethernet 1/0/7
switchport access vlan 100
dot1x guest-vlan enable
dot1x reauthentication
dot1x timeout reauth-period 300
dot1x mac-authentication mac-only
dot1x port-control auto
spanning-tree portfast
exit
!
interface gigabitethernet 1/0/8

dot1x host-mode multi-sessions
dot1x guest-vlan enable
dot1x reauthentication
dot1x timeout reauth-period 300
dot1x mac-authentication mac-only
dot1x radius-attributes vlan
dot1x port-control auto
spanning-tree portfast
exit
!
interface gigabitethernet 1/0/18
switchport access vlan 100
dot1x guest-vlan enable
dot1x reauthentication
dot1x timeout reauth-period 300
dot1x port-control auto
spanning-tree disable
spanning-tree bpdu filtering
exit
!
interface vlan 100
ip address 192.168.1.20 255.255.255.0
exit
!
interface vlan 200
dot1x guest-vlan
exit