3com S7906E 설치 설명서

 

1-7 

 

It is required that the RADIUS server and the device are reachable to each other and the username and 

password are configured on the server.  

 

1)  Configure MAC authentication on the device 

# Configure a RADIUS scheme. 

<Device> system-view 

[Device] radius scheme 2000 

[Device-radius-2000] primary authentication 10.1.1.1 1812 

[Device-radius-2000] primary accounting 10.1.1.2 1813 

[Device-radius-2000] key authentication abc 

[Device-radius-2000] key accounting abc 

[Device-radius-2000] user-name-format without-domain 

[Device-radius-2000] quit 

# Specify the AAA schemes for the ISP domain. 

[Device] domain 2000 

[Device-isp-2000] authentication default radius-scheme 2000 

[Device-isp-2000] authorization default radius-scheme 2000 

[Device-isp-2000] accounting default radius-scheme 2000 

[Device-isp-2000] quit 

# Enable MAC authentication globally. 

[Device] mac-authentication 

# Enable MAC authentication for port GigabitEthernet 2/0/1. 

[Device] mac-authentication interface gigabitethernet 2/0/1 

# Specify the ISP domain for MAC authentication. 

[Device] mac-authentication domain 2000 

# Set the MAC authentication timers. 

[Device] mac-authentication timer offline-detect 180 

[Device] mac-authentication timer quiet 180 

# Specify to use the username aaa and password 123456 for MAC authentication of all users.  

[Device] mac-authentication user-name-format fixed account aaa password simple 123456 

2)  Verify the configuration 

# Display global MAC authentication information. 

<Device> display mac-authentication 

MAC address authentication is enabled. 

User name format is fixed account 

 Fixed username:aaa 

 Fixed password:123456