3com WX3000 Manuel D’Utilisation

 

2-4 

As shown in 

, the user name is “someone”, and the authentication password is “hello”. It is 

connected to GigabitEthernet 1/0/1 of the switch and belongs to the test.net domain.  

It is required to configure a QoS profile to limit the rate of all the outbound IP packets of the user to 128 

kbps and configuring to drop the packets exceeding the target packet rate.  

Figure 2-1 Network diagram for QoS profile configuration 

User

Switch

Network

AAA Server

GEth1/0/1

 

 

1)  Configuration on the AAA server 

# Configure the user authentication information and the matching relationship between the user name 

and the QoS profile. Refer to the user manual of the AAA server for detailed configuration.  

2)  Configuration on the switch 

# Configure IP addresses for the RADIUS server. 

<device> system-view 

[device] radius scheme radius1 

[device-radius-radius1] primary authentication 10.11.1.1 

[device-radius-radius1] primary accounting 10.11.1.2 

[device-radius-radius1] secondary authentication 10.11.1.2 

[device-radius-radius1] secondary accounting 10.11.1.1 

# Set the encryption passwords for the device to exchange packets with the authentication RADIUS 

servers and accounting RADIUS servers. 

[device-radius-radius1] key authentication money 

[device-radius-radius1] key accounting money 

# Configure the device to delete the user domain name from the user name and then send the user 

name to the RADIUS sever. 

[device-radius-radius1] user-name-format without-domain 

[device-radius-radius1] quit