3com 5500-ei pwr Installation Instruction

 

1-21 

Figure 1-12 Network diagram for AAA configuration with 802.1x and RADIUS enabled 

 

 

 

  Note: 

Following configuration covers the major AAA/RADIUS configuration commands. Refer to AAA 

Operation for the information about these commands. Configuration on the client and the RADIUS 

servers is omitted. 

 

# Enable 802.1x globally. 

<Sysname> system-view 

System View: return to User View with Ctrl+Z. 

[Sysname] dot1x 

# Enable 802.1x on Ethernet 1/0/1. 

[Sysname] dot1x interface Ethernet 1/0/1 

# Set the access control method to MAC-based (This operation can be omitted, as MAC-based is the 

default). 

[Sysname] dot1x port-method macbased interface Ethernet 1/0/1 

# Create a RADIUS scheme named “radius1” and enter RADIUS scheme view. 

[Sysname] radius scheme radius1 

# Assign IP addresses to the primary authentication and accounting RADIUS servers. 

[Sysname-radius-radius1] primary authentication 10.11.1.1 

[Sysname-radius-radius1] primary accounting 10.11.1.2 

# Assign IP addresses to the secondary authentication and accounting RADIUS server. 

[Sysname-radius-radius1] secondary authentication 10.11.1.2 

[Sysname-radius-radius1] secondary accounting 10.11.1.1 

# Set the password for the switch and the authentication RADIUS servers to exchange messages. 

[Sysname-radius-radius1] key authentication name 

# Set the password for the switch and the accounting RADIUS servers to exchange messages.