3Com 4200G 12-Port, Руководство по настройке

Страница: 177 / 422

Configuration Example 163
and the authenticating RADIUS server to be name, and money for interaction
between the switch and the counting RADIUS. Configure the waiting period for
the switch to resend packets to the RADIUS server to be 5 seconds, that is, if after
5 seconds the RADIUS still has not sent any responses back, the switch will resend
packets. Configure the number of times that a switch resends packets to the
RADIUS server to be 5. Configure the switch to send real-time counting packets to
the RADIUS server every 15 minutes with the domain names removed from the
user name beforehand.
■
The user name and password for local 802.1x authentication are localuser and
localpass (in plain text) respectively. The idle disconnecting function is enabled.
Network diagram
Figure 53 Network diagram for AAA configuration with 802.1x and RADIUS enabled
Configuration procedure
Following configuration covers the major AAA/RADIUS configuration commands. You
can refer to AAA&RADIUS Operation Manual for the information about these
commands. Configuration on the client and the RADIUS servers is omitted.
1 Enable 802.1x globally.
<S4200G> system-view
System View: return to User View with Ctrl+Z.
[4200G] dot1x
2 Enable 802.1x for GigabitEthernet1/0/1 port.
[4200G] dot1x interface GigabitEthernet 1/0/1
3 Set the access control method to be MAC-address-based (can be omitted as
MAC-address-based is the default configuration).
[4200G] dot1x port-method macbased interface GigabitEthernet 1/0/1
4 Create a RADIUS scheme named radius1 and enter RADIUS scheme view.
[4200G] radius scheme radius1
5 Assign IP addresses to the primary authentication and accounting RADIUS servers.
[4200G-radius-radius1] primary authentication 10.11.1.1
[4200G-radius-radius1] primary accounting 10.11.1.2