3Com 5500 Switch User Manual


 
224 CHAPTER 23: QOS/QOS PROFILE CONFIGURATION GUIDE
# Enable 802.1x.
[3Com] dot1x
[3Com] dot1x interface Ethernet 1/0/1
Complete Configuration #
dot1x
#
radius scheme system
radius scheme radius1
server-type standard
primary authentication 10.11.1.1
primary accounting 10.11.1.2
secondary authentication 10.11.1.2
secondary accounting 10.11.1.1
key authentication money
key accounting money
user-name-format without-domain
#
domain system
domain test.net
scheme radius-scheme radius1
#
acl number 3000
rule 0 permit IP
#
qos-profile example
traffic-limit inbound ip-group 3000 rule 0 128 exceed drop
#
interface Ethernet1/0/1
dot1x
#
Precautions Note that:
A QoS profile can be applied manually or dynamically. You can use the apply
qos-profile profile-name command to manually apply a QoS profile to a port.
You can also combine a QoS profile with the 802.1x authentication function to
provide the pre-defined QoS function for a user or a group of users that have
passed authentication.
Depending on the 802.1x authentication mode, dynamic QoS profile
application mode can be user-based or port-based. The user-based mode is the
default mode.
If the traffic classification rules of a QoS profile take source information
(including source MAC, source IP, VLAN) as the match criterion, the QoS profile
cannot be applied in the user-based mode.
Currently, the QoS profile function provides packet filtering, traffic policing,
and priority marking.
The granularity of traffic policing is 64 kbps. If the value you input is in the
range of N×64 to (N+1)×64 (N is a natural number), the switch sets the value to
(N+1)×64 kbps automatically.