display access-user access-type dot1x查看在线802.1X用户信息。
display access-user access-type none 查看空认证
display access-user access-type mac-authen 查看mac认证信息。




http://rds.sz-torch.com/certsrv/             申请证书


route add 192.168.8.186 mask 255.255.255.255 172.18.28.1 -p

管理活动目录、DNS、DHCP服务器,你需要安装远程服务器管理工具(RSAT-Remote Server Administration Tools)
在线安装
Get-WindowsCapability -Name RSAT* -Online | Add-WindowsCapability -Online
离线安装，需要iso解压开
Get-WindowsCapability -Name RSAT* -Online | Add-WindowsCapability -Online -LimitAccess -Source "C:\FOD-ISO-Extracted\


https://blog.itpro.cc/category/ops/


reg import "%SCRIPTROOT%\MoveProfile.reg













sysname HUAWEI
#
vlan batch 2 to 1000
#
stp disable
#
authentication-profile name dot1xmac_authen_profile
 dot1x-access-profile dot1x_access_profile
 mac-access-profile mac_access_profile
 authentication mode multi-authen max-user 100
 access-domain isp1 force
 link-down offline delay 0
#
radius-server template default
 radius-server shared-key cipher %^%#mr:0ID<[GK7Z)T@}A08~%gak3e}24DBtuT<OL(gH%^%#
 radius-server authentication 172.18.128.104 1812 source ip-address 172.18.3.19 weight 80
#
aaa
 authentication-scheme radius
  authentication-mode radius
#
 domain isp1
  authentication-scheme radius
  radius-server default
#
interface Vlanif1
 ip address 172.18.3.19 255.255.255.0
#
interface GigabitEthernet0/0/8
 port link-type hybrid
 authentication-profile dot1xmac_authen_profile
#