3Com MSR 50 Series, Configuration Manual

Page: 1866 / 2443

1866 C
HAPTER
98: P
ORTAL
C
ONFIGURATION
Network diagram
Figure 542 Network diagram for direct authentication
Configuration procedure
n
IP addresses are configured for devices as required and routes are available
between devices before the feature is enabled.
Configure the access device:
1
Configure a RADIUS scheme
# Create a RADIUS scheme named “rs1” and enter the scheme view.
<Router> system-view
[Router] radius scheme rs1
# Set the server type to “extended”.
[Router-radius-rs1] server-type extended
# Configure the primary authentication server, the primary accounting server, and
the keys for both servers to communicate.
[Router-radius-rs1] primary authentication 192.168.0.112
[Router-radius-rs1] primary accounting 192.168.0.112
[Router-radius-rs1] key accounting radius
[Router-radius-rs1] key authentication radius
[Router-radius-rs1] user-name-format without-domain
# Configure the IP address of the security policy server.
[Router-radius-rs1] security-policy-server 192.168.0.113
[Router-radius-rs1] quit
2
Configure an authentication domain
# Create an ISP domain named “dm1” and enter the domain view.
[Router] domain dm1
Router Host
2.2.2 .2/24
Gateway : 2.2.2.1 /24
Eth1/0
2.2.2.1 /24
Eth1/1
192 .168 .0 .100 /24
Portal server
192 .168.0.111/24
RADIUS server
192 .168.0.112/24
192 .168 .0.113 /24
Security policy server