H3C S5120-EI Series, Руководство по эксплуатации

Страница: 572 / 1191

1-15
To do… Use the command… Remarks
Clear 802.1X statistics
reset dot1x statistics
[
interface
interface-list
]
Available in user view
802.1X Configuration Example
Network requirements
z
The access control method of
macbased
is required on the port GigabitEthernet 1/0/1 to control
clients.
z
All clients belong to default domain aabbcc.net, which can accommodate up to 30 users. RADIUS
authentication is performed at first, and then local authentication when no response from the
RADIUS server is received. If the RADIUS accounting fails, the device gets users offline.
z
A server group with two RADIUS servers is connected to the device. The IP addresses of the
servers are 10.1.1.1 and 10.1.1.2 respectively. Use the former as the primary
authentication/accounting server, and the latter as the secondary authentication/accounting
server.
z
Set the shared key for the device to exchange packets with the authentication server as name, and
that for the device to exchange packets with the accounting server as money.
z
Specify the device to try up to five times at an interval of 5 seconds in transmitting a packet to the
RADIUS server until it receives a response from the server, and to send real time accounting
packets to the accounting server every 15 minutes.
z
Specify the device to remove the domain name from the username before passing the username to
the RADIUS server.
z
Set the username of the 802.1X user as
localuser
and the password as
localpass
and specify to
use clear text mode. Enable the idle cut function to get the user offline whenever the user remains
idle for over 20 minutes.
Figure 1-9
Network diagram for 802.1X configuration
Configuration procedure