Damien
35fdaba993
- Configure dot1x on access switch host-facing ports (Et3/Et4) with RADIUS dynamic VLAN assignment - Switch host-facing port-channels to access mode (from trunk) to align with dot1x dynamic VLAN behavior - Add wpa_supplicant configs and binds for all hosts - Remove VLAN subinterfaces from hosts, assign IPs directly to bond0 (untagged traffic for dot1x access ports) Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
81 lines
1.8 KiB
INI
81 lines
1.8 KiB
INI
! Access3 Configuration
|
|
! L2-only access switch for VTEP3 (leaf5/leaf6)
|
|
!
|
|
hostname access3
|
|
!
|
|
! LLDP Management0
|
|
lldp management-address Management0
|
|
!
|
|
! enable gNMI API
|
|
management api gnmi
|
|
transport grpc default
|
|
provider eos-native
|
|
!
|
|
! admin/admin for ssh access
|
|
username admin privilege 15 role network-admin secret sha512 $6$xQktFrbdeqEhVzLM$.1wOJB25nw2fqYaSXDu6y4mo6AP9hngMCFe2vGDl84hWoz00Q.4unoEBqspNI0HEoRz.OZhdBHqQv12KABf0B0
|
|
!
|
|
! RADIUS server
|
|
radius-server host 172.16.0.200 key arista123
|
|
!
|
|
! AAA for dot1x
|
|
aaa authentication dot1x default group radius
|
|
!
|
|
! Enable 802.1X globally
|
|
dot1x system-auth-control
|
|
!
|
|
! VLANs
|
|
vlan 40
|
|
name test-l2-vxlan
|
|
!
|
|
! Management interface
|
|
interface Management0
|
|
ip address 172.16.0.43/24
|
|
!
|
|
! Spanning-tree
|
|
spanning-tree mode mstp
|
|
spanning-tree edge-port bpduguard default
|
|
!
|
|
! Uplink to leaf MLAG pair (Port-Channel 10)
|
|
interface Ethernet1
|
|
description leaf5-uplink
|
|
channel-group 10 mode active
|
|
!
|
|
interface Ethernet2
|
|
description leaf6-uplink
|
|
channel-group 10 mode active
|
|
!
|
|
interface Port-Channel10
|
|
description uplink-to-leaf-mlag
|
|
switchport mode trunk
|
|
switchport trunk allowed vlan 40
|
|
no shutdown
|
|
!
|
|
! Host-facing downlink (Port-Channel 1)
|
|
interface Ethernet3
|
|
description host3
|
|
channel-group 1 mode active
|
|
dot1x pae authenticator
|
|
dot1x port-control auto
|
|
dot1x host-mode single-host
|
|
!
|
|
interface Ethernet4
|
|
description host3
|
|
channel-group 1 mode active
|
|
dot1x pae authenticator
|
|
dot1x port-control auto
|
|
dot1x host-mode single-host
|
|
!
|
|
interface Port-Channel1
|
|
description host3
|
|
switchport mode access
|
|
switchport access vlan 40
|
|
port-channel lacp fallback timeout 5
|
|
port-channel lacp fallback individual
|
|
spanning-tree portfast
|
|
no shutdown
|
|
!
|
|
! Default route for management
|
|
ip route 0.0.0.0/0 172.16.0.254
|
|
!
|
|
end
|