224 CHAPTER 23: QOS/QOS PROFILE CONFIGURATION GUIDE
# Enable 802.1x.
[3Com] dot1x
[3Com] dot1x interface Ethernet 1/0/1
Complete Configuration #
dot1x
#
radius scheme system
radius scheme radius1
server-type standard
primary authentication 10.11.1.1
primary accounting 10.11.1.2
secondary authentication 10.11.1.2
secondary accounting 10.11.1.1
key authentication money
key accounting money
user-name-format without-domain
#
domain system
domain test.net
scheme radius-scheme radius1
#
acl number 3000
rule 0 permit IP
#
qos-profile example
traffic-limit inbound ip-group 3000 rule 0 128 exceed drop
#
interface Ethernet1/0/1
dot1x
#
Precautions Note that:
■ A QoS profile can be applied manually or dynamically. You can use the apply
qos-profile profile-name command to manually apply a QoS profile to a port.
You can also combine a QoS profile with the 802.1x authentication function to
provide the pre-defined QoS function for a user or a group of users that have
passed authentication.
■ Depending on the 802.1x authentication mode, dynamic QoS profile
application mode can be user-based or port-based. The user-based mode is the
default mode.
■ If the traffic classification rules of a QoS profile take source information
(including source MAC, source IP, VLAN) as the match criterion, the QoS profile
cannot be applied in the user-based mode.
■ Currently, the QoS profile function provides packet filtering, traffic policing,
and priority marking.
■ The granularity of traffic policing is 64 kbps. If the value you input is in the
range of N×64 to (N+1)×64 (N is a natural number), the switch sets the value to
(N+1)×64 kbps automatically.
