3Com 3CRWX120695A, Installation And Basic Configuration Manual

Page: 80 / 108

80 C
HAPTER
3: C
ONFIGURING A
WX S
WITCH FOR
B
ASIC
S
ERVICE
display aaa
The following commands configure two RADIUS servers, add them to
server group
grp1 , enable load balancing of authentication sessions
among the servers, and verify the change:
WX1200# set radius server svr1 address 10.10.70.20 key rad1pword
success: change accepted.
WX1200# set radius server svr2 address 10.10.70.40 key rad2pword
success: change accepted.
WX1200# set server group grp1 members svr1 svr2
success: change accepted.
WX1200# set server group grp1 load-balance enable
success: change accepted.
WX1200# display aaa
Default Values
authport=1812 acctport=1813 timeout=5 acct-timeout=5
retrans=3 deadtime=0 key=(null) author-pass=(null)
Radius Servers
Server Addr Ports T/o Tries Dead State
-------------------------------------------------------------------
svr1 10.10.70.20 1812 1813 5 3 0 UP
svr2 10.10.70.40 1812 1813 5 3 0 UP
Server groups
grp1 (load-balanced): svr1 svr2
Configuring the Authentication Protocol for Pass-Through
Authentication
To configure the authentication protocol for 802.1X users, use the
following command:
set authentication dot1x {ssid ssid-name | wired} user-glob
[bonded] protocol method1 [method2] [method3] [method4]
To verify the change, use the following command:
display aaa
The asterisk in the example below is a wildcard. You cannot use a
wildcard to represent the delimiter characters in user globs, which are the
at sign (@) and the dot (
.
). To match a username that contains a delimiter,
you must specify the delimiter in the user glob as shown in these