SNR S2940-8G-v2, Configuration Manual

Page: 322 / 420

SNR S2940-8G-v2 Switch Configuration Guide
802.1x Configuration
Switch(config)#interface vlan 1
Switch(Config-if-vlan1)#ip address 10.1.1.2 255.255.255.0
Switch(Config-if-vlan1)#exit
Switch(config)#radius-server authentication host 10.1.1.3
Switch(config)#radius-server accounting host 10.1.1.3
Switch(config)#radius-server key test
Switch(config)#aaa enable
Switch(config)#aaa-accounting enable
Switch(config)#dot1x enable
Switch(config)#interface ethernet 1/0/2
Switch(Config-Ethernet1/0/2)#dot1x enable
Switch(Config-Ethernet1/0/2)#dot1x port-control auto
Switch(Config-Ethernet1/0/2)#exit
45.3.3 Examples of IPv6 Radius Application
Switch
2004:1:2:3::2
Radius Server
2004:1:2:3::3
2004:1:2:3::1
Figure 45.17: IPv6 Radius
Connect the computer to the interface 1/0/2 of the switch, and enable IEEE802.1x on inter-
face1/0/2. Use MAC based authentication. Configure the IP address of the switch as 2004:1:2:3::2,
and connect the switch with any interface except interface 1/0/2 to the RADIUS authentication
server. Configure the IP address of the RADIUS server to be 2004:1:2:3::3. Use the default ports
1812 and 1813 for authentication and accounting respectively. Install the IEEE802.1x authentica-
tion client software on the computer, and use the client for IEEE802.1x authentication.
The detailed configurations are listed as below:
Switch(config)#interface vlan 1
Switch(Config-if-vlan1)#ipv6 address 2004:1:2:3::2/64
Switch(Config-if-vlan1)#exit
Switch(config)#radius-server authentication host 2004:1:2:3::3
Switch(config)#radius-server accounting host 2004:1:2:3::3
Switch(config)#radius-server key test
Switch(config)#aaa enable
Switch(config)#aaa-accounting enable
Switch(config)#dot1x enable
322