GE MDS ORBIT ECR, Техническое руководство

Страница: 447 / 463

MDS 05-6632A01, Rev. F MDS Orbit MCR/ECR Technical Manual 447
The status of port authentication for all network interfaces on the Orbit can be viewed by issuing the
following command. Although all interfaces are displayed, port authentication only applies to ETH1 and
ETH2.
run show interfaces-state interface security
NAME SECURITY
---------------------
Bridge -
Cell -
ETH1 pending
ETH2 authorized
NxRadio -
Freeradius 13.2.2
Setup freeradius with server and device certificates, users, and network clients. The following shows only
a snippet of the configuration but has the most important sections listed.
/etc/freeradius/users
# Username/password example
joe Cleartext-Password := password
# MAC Authentication Bypass (MAB) examples
d89d67f4ffb6 Cleartext-Password := d89d67f4ffb6
0010186f8dfd Cleartext-Password := 0010186f8dfd
989096cbcd6e Cleartext-Password := 989096cbcd6e
00133b109b4c Cleartext-Password := 00133b109b4c
/etc/freeradius/eap.conf
Setup tls { } section with your certificates, key and key password
/etc/freeradius/clients.conf
# Allow connections from devices in this network
client 192.168.1.0/24 {
secret = password
shortname = ghost
}