3com 4210 PWR 9-Port 3CR17341-91-ME User Manual

802.1x provides a solution for authenticating users. To implement this solution, 
you need to execute 802.1x-related commands. You also need to configure AAA 
schemes on switches and specify the authentication scheme (RADIUS, HWTACACS 
or local authentication scheme).

Figure 75   802.1x configuration

■

802.1x users use domain names to associate with the ISP domains configured 
on switches

■

Configure the AAA scheme (a local authentication scheme or a RADIUS 
scheme) to be adopted in the ISP domain.

■

If you specify to adopt a local authentication scheme, you need to configure 
user names and passwords manually on the switches. Users can pass the 
authentication through 802.1x client if they provide user names and passwords 
that match those configured on the switches.

■

If you use the RADIUS scheme, the supplicant systems are authenticated by a 
remote RADIUS server. In this case, you need to configure the user names and 
passwords on the RADIUS server and perform RADIUS client-related 
configuration on the switch.

■

You can also specify to adopt the RADIUS authentication scheme, with a local 
authentication scheme as a backup. In this case, the local authentication 
scheme is adopted when the RADIUS server fails.

Refer to “AAA Configuration” on page 245 for detailed information about AAA 
scheme configuration.

■

Configure ISP domain and the AAA scheme to be adopted. You can specify a 
RADIUS scheme, a HWTACACS scheme, or a local scheme.

■

Ensure that the service type is configured as lan-access (by using the 
service-type command) if local authentication scheme is adopted.

ISP domain

configurati on

AAA sc heme

Local

authenticati on

RADIUS

scheme

802.1x 

configurati on

ISP domain

configurati on

AAA sc heme

Local

authenticati on

RADIUS

scheme

802.1x 

configurati on

Table 162   Configure basic 802.1x functions

Enter system view

system-view 

- 

Enable 802.1x globally dot1x 

Required

By default, 802.1x is disabled 
globally.