AudioCodes Mediant 500L MSBR, Configuration Manual

Page: 63 / 74

Configuration Guide 9. 802.1X
Version 7.2 63 Security Setup
9 802.1X
The device supports dot1x from Version 6.8. The dot1x is a protocol that allows or denies
access of a host to the network based on the hosts' authentication. To configure 802.1x using
an authentication server, perform the following configuration steps:
Command Description
# configure data
Enter the data configuration menu.
(config-data)# dot1x radius-
server host 192.168.0.200 auth-
port 1812 key P@ssw0rd
Configure a RADIUS server with IP address
192.168.0.200 on port 1812, with the key
"P@ssw0rd". Instead of specifying the host, the
"local" keyword can be used. In this case, local
users configured on the device will be used.
(config-data)# dot1x lan-
authentication enable
Enable dot1x authentication globally.
(config-data)# interface
gigabitethernet 4/3
Configure the interface gigabitethernet 4/3.
(conf-if-GE 4/3)# authentication
dot1x single-host |multi-host
Configure dot1x on the interface, using a
single-host – only one MAC address of the
supplicant is allowed on the port, or multi-host,
allow any connected MAC.
# show data dot1x-status
Displays dot1x status.
To configure dot1x authentication using a local server, do the following:
Command Description
# configure data
Enter the data configuration menu.
(config-data)# dot1x radius-
server local
Use local users configured on the device to
allow access to the network.
(config-data)# dot1x local-user
administrator password P@ssw0rd
Configure username "administrator" with
password "P@ssw0rd".
(conf-if-GE 4/3)# authentication
dot1x single-host |multi-host
Configure dot1x on the interface, using single-
host – only one MAC address of the supplicant
is allowed on the port, or multi-host, allow any
connected MAC.