Ruijie RG-S2900G-E Series, Configuration Manual

Page: 524 / 943

Configuration Guide 802.1x Configuration
cases. For example, when the security server used only supports the PAP authentication mode, this mode can be
selected to fully exploit the existing resources, protecting the existing investment.
In the privileged EXEC mode, you can set the authentication mode of the 802.1x by performing the following steps:
Command Function
Ruijie(config)# dot1x auth-mode mode Configure the authentication mode
Ruijie# show dot1x
Show the configuration.
The following example configures the authentication mode to the CHAP mode:
Ruijie# configure terminal
Ruijie(config)# dot1x auth-mode CHAP
Ruijie(config)# end
Ruijie# show dot1x
802.1X Status: Disabled
Authentication Mode: CHAP
Authed User Number: 0
Re-authen Enabled: Disabled
Re-authen Period: 3600 sec
Quiet Timer Period: 10 sec
Tx Timer Period: 3 sec
Supplicant Timeout: 3 sec
Server Timeout: 5 sec
Re-authen Max: 3 times
Maximum Request: 3 times
Filter Non-RG Supp: Disabled
Client Oline Probe: Disabled
Eapol Tag Enable: Disabled
Authorization Mode: Group Server
Configuring the backup authentication server
Our 802.1x-based authentication system can support the backup server.When the master server is down due to various
reasons, the device automatically issues a server submission authentication request to the method list server group.
In the privileged EXEC mode, you can set the backup authentication server by performing the following steps:
Command Function
Ruijie(config)# aaa new - model Turn on the AAA switch.
Ruijie(config)# aaa group server radius gs-name Configure the server group.
Ruijie(config-gs-radius)# server sever Configure the server.
Ruijie(config-gs-radius)# server server-backup Configure the backup server.
Ruijie# show dot1x Show the configuration.
The following example configures 192.168.4.12 to be the backup server:
Ruijie# configure terminal
Ruijie# aaa new-model