3com 4210 User Manual
172
C
HAPTER
18: AAA C
ONFIGURATION
G
UIDE
Configuration Procedure
# Create a RADIUS scheme named cams and specify the primary and secondary
servers.
servers.
<3Com> system-view
[3Com] radius scheme cams
[3Com-radius-cams] primary authentication 192.168.1.19
[3Com-radius-cams] primary accounting 192.168.1.19
[3Com-radius-cams] secondary authentication 192.168.1.20
[3Com-radius-cams] secondary accounting 192.168.1.20
# Set the shared key for message exchange with the authentication and
accounting RADIUS servers to expert.
accounting RADIUS servers to expert.
[3Com-radius-cams] key authentication expert
[3Com-radius-cams] key accounting expert
# Configure the switch to send a username with the domain name.
[3Com-radius-cams] user-name-format with-domain
# Specify the server type as extended.
[3Com-radius-cams] server-type extended
# Create an ISP domain named abc, bind RADIUS scheme cams for
authentication, and configure dynamic VLAN assignment.
authentication, and configure dynamic VLAN assignment.
[3Com] domain abc
[3Com-isp-abc] radius-scheme cams
[3Com-isp-abc] vlan-assignment-mode integer
[3Com-isp-abc] quit
# Configure the ISP domain abc as the default ISP domain.
[3Com] domain default enable abc
# Enable guest VLAN on the port.
[3Com] interface Ethernet 1/0/3
[3Com-Ethernet1/0/3] dot1x port-method portbased
[3Com-Ehternet1/0/3] dot1x guest-vlan 10
# Enabled 802.1x.
[3Com] dot1x
# Enable 802.1x in interface view.
[3Com] interface Ethernet 1/0/3
[3Com-Ethernet1/0/3] dot1x
Complete Configuration
#
system-view
Switch 4210
Release V03.01.00
All versions
Product series
Software version
Hardware version