3Com 5500 SI - Switch - Stackable, Руководство по настройке

Страница: 428 / 686

428 C
HAPTER
21: 802.1
X
C
ONFIGURATION
Setting the Unit of Data
Flow that Transmitted to
the RADIUS Server
The following command defines the unit of the data flow sent to RADIUS server.
Perform the following configurations in RADIUS Scheme View
Table 463 Setting the Unit of Data Flow Transmitted to the RADIUS Server
By default, the default data unit is byte and the default data packet unit is one
packet.
Configuring the Local
RADIUS Authentication
Server
RADIUS service adopts authentication/authorization/accounting servers to manage
users. Local authentication/authorization/accounting service is also used in these
products and it is called local RADIUS authentication server function.
Perform the following commands in System View to create/delete local RADIUS
authentication server.
Table 464 Creating/Deleting the Local RADIUS Authentication Server
By default, the IP address of the local RADIUS authentication server is 127.0.0.1 and
the password is 3com.
1) When using local RADIUS server function of 3com, remember the number of the
UDP port used for authentication is 1645 and that for accounting is 1646.
2) The password configured by this command must be the same as that of the
RADIUS authentication/authorization packet configured by the command
key
authentication
in RADIUS Scheme View.
Configuring Source
Address for RADIUS
Packets Sent by NAS
Perform the following configurations in the corresponding view.
Table 465 Configuring Source Address for the RADIUS Packets sent by the NAS
You can use either command to bind a source address with the NAS.
By default, no source address is specified and the source address of a packet is the
address of the interface to where it is sent.
Operation Command
Set the unit of data flow
transmitted to RADIUS
server
data-flow-format data { byte | giga-byte |
kilo-byte | mega-byte } packet { giga-byte |
kilo-byte | mega-byte | one-packet }
Restore the unit to the
default setting
undo data-flow-format
Operation Command
Create the local RADIUS authentication
server
local-server nas-ip ip_address key
password
Delete the local RADIUSauthentication
server
undo local-server nas-ip ip_address
Operation Command
Configure the source address to be carried in the RADIUS
packets sent by the NAS(RADIUS scheme view).
nas-ip ip_address
Cancel the configured source address to be carried in the
RADIUS packets sent by the NAS(RADIUS scheme view).
undo nas-ip
Configure the source address to be carried in the RADIUS
packets sent by the NAS(System view).
radius nas-ip ip_address
Cancel the configured source address to be carried in the
RADIUS packets sent by the NAS(System view).
undo radius nas-ip