3Com 5500 # Enable, Passed authentication, Default mode, Cannot be applied in the user-based mode

224CHAPTER 23: QOS/QOS PROFILE CONFIGURATION GUIDE

#Enable 802.1x.

	[3Com] dot1x
	[3Com] dot1x interface Ethernet 1/0/1
Complete Configuration	#
	dot1x
	#
	radius scheme system
	radius scheme radius1
	server-type standard
	primary authentication 10.11.1.1
	primary accounting 10.11.1.2
	secondary authentication 10.11.1.2
	secondary accounting 10.11.1.1
	key authentication money
	key accounting money
	user-name-format without-domain
	#
	domain system
	domain test.net
	scheme radius-scheme radius1
	#
	acl number 3000
	rule 0 permit IP
	#
	qos-profile example
	traffic-limit inbound ip-group 3000 rule 0 128 exceed drop
	#
	interface Ethernet1/0/1
	dot1x
	#
Precautions	Note that:
	■ A QoS profile can be applied manually or dynamically. You can use the apply
	qos-profileprofile-namecommand to manually apply a QoS profile to a port.
	You can also combine a QoS profile with the 802.1x authentication function to
	provide the pre-defined QoS function for a user or a group of users that have
	passed authentication.
	■ Depending on the 802.1x authentication mode, dynamic QoS profile
	application mode can be user-based or port-based. The user-based mode is the
	default mode.
	■ If the traffic classification rules of a QoS profile take source information
	(including source MAC, source IP, VLAN) as the match criterion, the QoS profile
	cannot be applied in the user-based mode.
	■ Currently, the QoS profile function provides packet filtering, traffic policing,
	and priority marking.
	■ The granularity of traffic policing is 64 kbps. If the value you input is in the
	range of N⋅64 to (N+1)⋅64 (N is a natural number), the switch sets the value to
	(N+1)⋅64 kbps automatically.