143
Figure 49
Device list
Figure 50
Adding a port group
5.
Select
User Access Manager
>
Service Parameters
>
Validate System Configuration
from the
navigation tree to validate the configurations.
Configuring the switch
1.
Configure a RADIUS scheme:
# Create a RADIUS scheme named
rs1
and enter its view.
<Switch> system-view
[Switch] radius scheme rs1
# Specify the primary authentication server and primary accounting server, and configure the keys
for communication with the servers.
[Switch-radius-rs1] primary authentication 192.168.0.112
[Switch-radius-rs1] primary accounting 192.168.0.112
[Switch-radius-rs1] key authentication simple radius
[Switch-radius-rs1] key accounting simple radius
# Exclude the ISP domain name from the username sent to the RADIUS server.
[Switch-radius-rs1] user-name-format without-domain
[Switch-radius-rs1] quit
# Enable RADIUS session control.
[Switch] radius session-control enable
2.
Configure an authentication domain:
# Create an ISP domain named
dm1
and enter its view.
[Switch] domain dm1
# Configure AAA methods for the ISP domain.
