Panasonic PN28480K-ID, Operation Manual

Page: 332 / 438

332
<Configuration example 2>
Overview: Enable MAC authentication for Port 1 to 2.
Isolate the unregistered terminal to VLAN 100.
Specify the authentication destination to RADIUS server. Send
the user name and password in the format of
"XX-XX-XX-XX-XX-XX" for both of them.
Note: Create the following user account to RADIUS server to
have it assigned to VLAN 1 after authentication.
User name: XX-XX-XX-XX-XX-XX
Password: XX-XX-XX-XX-XX-XX
Tunnel-Private-Group-Id=1
1. Set Primary Database for MAC authentication to RADIUS.
2. Move to the interface configuration mode for Port 1, 2.
3. Change PVID for Port 1, 2 to 100.
4. Specify Port 1, 2 as target ports for MAC authentication.
5. Enable MAC authentication.
Fig. 4-13-3 Configuration example of MAC authentication (RADIUS
authentication)
M24eG> enable
M24eG# configure
M24eG(config)# aaa authentication mac primary radius secondary none
･･･ 1
M24eG(config)# interface GigabitEthernet0/1-2 ･･･ 2
M24eG(config-if)# pvid 100 ･･･ 3
M24eG(config-if)# exit
M24eG(config)# mac-authentication port 1-2
･･･ 4
M24eG(config)# mac-authentication ･･･ 5
M24eG(config)# end
M24eG#