Quanta Cloud Technology QuantaMesh QNOS5, Configuration Manual

Page: 128 / 256

128
always enters the Privileged EXEC mode without entering the enable password in the default
configuration.
The methods can be changed, but the preconfigured profiles cannot be deleted or renamed.
4.1.3.1. Configuring Authentication Profiles for Post-based Authentication
In addition to authentication profiles to control access to the management interface, you can configure an
authentication profile for IEEE 802.1X port-based access control to control access to the network through
the switch ports. To configure a port-based authentication profile, you specify
dot1x
as the access type, and
configure
ias
,
local
,
none
, or
radius
as the authentication method. The
ias
method specifies that the
802.1X feature should use the Internal Authentication Server (IAS) database for 801X port-based
authentication. The IAS database is stored locally on the switch
4.1.4. Configuring the Primary and Secondary RADIUS Servers
The commands in this example configure primary and secondary RADIUS servers that the switch will use to
authenticate access. The RADIUS servers use the same RADIUS secret.
To configure the switch:
1. Configure the primary and secondary RADIUS servers.
(QCT) #configure
(QCT) (Config)#radius server host auth 10.27.65.103
(QCT) (Config)#radius server host auth 10.27.65.114
2. Specify which RADIUS server is the primary.
(QCT) (Config)#radius server primary 10.27.65.103
(QCT) (Config)#radius server key auth 10.27.65.103
3. Configure a shared secret that the switch will use to authenticate with the RADIUS servers.
Enter secret (64 characters max):********
Re-enter secret:********
4. View the configured RADIUS servers.
(QCT) (Config)#exit
(QCT) #show radius servers
Current Host Address Server Name Port Type
---- ------------------------ ------------------------------ ----- ---------
10.27.65.114 Default-RADIUS-Server 1812 Secondary
* 10.27.65.103 Default-RADIUS-Server 1812 Primary
* currently selected server