Cisco 2950G 802.1X+AD+CA+IAS进行802.1x身份验证

./Cisco2950G802.1X+AD+CA+IAS进行802.1x身份验证要求：1.交换机支持802.1X协议。2.有一台RADIUS服务器。3.一台客户端。网络拓扑：验证方式： PEAP验证：使用证书＋AD用户集成认证;环境： OperationSystem:Windows2003enterpriseedition RadiusServer:windowsIAS<Internet验证服务,windows组件中安装> CAServer:WindowsCA证书服务<windows组件中安装> RadiusClient:Windows自带。〔网络连接->属性->验证,如果没有"验证"选项卡,则是相关服务没有启用。〔开始->运行->services.msc->启动"WirelessZeroConfiguration"服务配置：1.安装域,域名暂时定为：test.。过程略,查看相关文档2.安装IIS<Internet信息服务>,IAS,CA：控制面板－>添加/删除程序->安装windows组件,如图:意先安装IIS->CA->IAS,顺序不能乱了.3.配置CA:配置过程略,参考相关资料.4.CISCO2950G-48-EI交换机配置:Buildingconfiguration...Currentconfiguration:4944bytes!version12.1noservicepadservicetimestampsdebuguptimeservicetimestampsloguptimenoservicepassword-encryption!hostnameLayer_4_2!aaanew-modelaaaauthenticationdot1xdefaultgroupradiusaaaauthorizationnetworkdefaultgroupradius!ipsubnet-zero!!!spanning-treemodemstnospanning-treeoptimizebpdutransmissionspanning-treeextendsystem-iddot1xsystem-auth-control!!!!interfaceFastEthernet0/1switchportaccessvlan6!interfaceFastEthernet0/1.1!interfaceFastEthernet0/2switchportaccessvlan6!interfaceFastEthernet0/3switchportaccessvlan6!interfaceFastEthernet0/4switchportaccessvlan6spanning-treeportfast!interfaceFastEthernet0/5switchportaccessvlan6spanning-treeportfast!interfaceFastEthernet0/6switchportaccessvlan6spanning-treeportfast!interfaceFastEthernet0/7switchportaccessvlan6spanning-treeportfast!interfaceFastEthernet0/8switchportaccessvlan6spanning-treeportfast!interfaceFastEthernet0/9switchportaccessvlan6spanning-treeportfast!interfaceFastEthernet0/10switchportaccessvlan6spanning-treeportfast!interfaceFastEthernet0/11switchportaccessvlan6spanning-treeportfast!interfaceFastEthernet0/12switchportaccessvlan6spanning-treeportfast!interfaceFastEthernet0/13switchportaccessvlan6spanning-treeportfast!interfaceFastEthernet0/14switchportaccessvlan6spanning-treeportfast!interfaceFastEthernet0/15switchportaccessvlan6spanning-treeportfast!interfaceFastEthernet0/16switchportaccessvlan6spanning-treeportfast!interfaceFastEthernet0/17switchportaccessvlan6spanning-treeportfast!interfaceFastEthernet0/18switchportaccessvlan6spanning-treeportfast!interfaceFastEthernet0/19switchportaccessvlan6spanning-treeportfast!interfaceFastEthernet0/20switchportaccessvlan6!interfaceFastEthernet0/21switchportaccessvlan6spanning-treeportfast!interfaceFastEthernet0/22switchportaccessvlan6spanning-treeportfast!interfaceFastEthernet0/23switchportaccessvlan6spanning-treeportfast!interfaceFastEthernet0/24switchportaccessvlan6spanning-treeportfast!interfaceFastEthernet0/25switchportaccessvlan6spanning-treeportfast!interfaceFastEthernet0/26switchportaccessvlan6spanning-treeportfast!interfaceFastEthernet0/27switchportaccessvlan6spanning-treeportfast!interfaceFastEthernet0/28switchportaccessvlan6spanning-treeportfast!interfaceFastEthernet0/29switchportaccessvlan6spanning-treeportfast!interfaceFastEthernet0/30switchportaccessvlan6spanning-treeportfast!interfaceFastEthernet0/31switchportaccessvlan6spanning-treeportfast!interfaceFastEthernet0/32switchportaccessvlan6spanning-treeportfast!interfaceFastEthernet0/33switchportaccessvlan7spanning-treeportfast!interfaceFastEthernet0/34switchportaccessvlan7spanning-treeportfast!interfaceFastEthernet0/35switchportaccessvlan7spanning-treeportfast!interfaceFastEthernet0/36switchportmodeaccessdot1xport-controlautodot1xguest-vlan21spanning-treeportfast!interfaceFastEthernet0/37switchportaccessvlan7spanning-treeportfast!interfaceFastEthernet0/38switchportaccessvlan7spanning-treeportfast!interfaceFastEthernet0/39switchportaccessvlan7spanning-treeportfast!interfaceFastEthernet0/40switchportaccessvlan7spanning-treeportfast!interfaceFastEthernet0/41switchportaccessvlan7spanning-treeportfast!interfaceFastEthernet0/42switchportaccessvlan7spanning-treeportfast!interfaceFastEthernet0/43switchportaccessvlan7spanning-treeportfast!interfaceFastEthernet0/44switchportaccessvlan7spanning-treeportfast!interfaceFastEthernet0/45switchportaccessvlan7spanning-treeportfast!interfaceFastEthernet0/46switchportaccessvlan7spanning-treeportfast!interfaceFastEthernet0/47switchportaccessvlan7spanning-treeportfast!interfaceFastEthernet0/48switchportaccessvlan7spanning-treeportfast!interfaceGigabitEthernet0/1switchportmodetrunk!interfaceGigabitEthernet0/2!interfaceVlan1noiproute-cache!interfaceVlan6noiproute-cacheshutdown!interfaceVlan7noiproute-cacheshutdown!iphttpserverradius-serverhostauth-port1812acct-port1813keytestradius-serverretransmit3radius-servervsasendauthentication!linecon0linevty0