802.1x Configuration 223
802.1x Configuration 802.1x provides a solution for authenticating users. To implement this solution,
you need to execute 802.1x-related commands. You also need to configure AAA
schemes on switches and specify the authentication scheme (RADIUS, HWTACACS
or local authentication scheme).
Figure 75 802.1x configuration
■ 802.1x users use domain names to associate with the ISP domains configured
on switches
■ Configure the AAA scheme (a local authentication scheme or a RADIUS
scheme) to be adopted in the ISP domain.
■ If you specify to adopt a local authentication scheme, you need to configure
user names and passwords manually on the switches. Users can pass the
authentication through 802.1x client if they provide user names and passwords
that match those configured on the switches.
■ If you use the RADIUS scheme, the supplicant systems are authenticated by a
remote RADIUS server. In this case, you need to configure the user names and
passwords on the RADIUS server and perform RADIUS client-related
configuration on the switch.
■ You can also specify to adopt the RADIUS authentication scheme, with a local
authentication scheme as a backup. In this case, the local authentication
scheme is adopted when the RADIUS server fails.
Refer to “AAA Configuration” on page 245 for detailed information about AAA
scheme configuration.
Basic 802.1x
Configuration
Configuration
Prerequisites
■ Configure ISP domain and the AAA scheme to be adopted. You can specify a
RADIUS scheme, a HWTACACS scheme, or a local scheme.
■ Ensure that the service type is configured as lan-access (by using the
service-type command) if local authentication scheme is adopted.
Configuring Basic 802.1x
Functions
ISP domain
config urati on
AAA sc heme
Local
aut he nticati on
RADIUS
scheme
802 .1 x
config urati on
ISP domain
config urati on
AAA sc heme
Local
aut he nticati on
RADIUS
scheme
802 .1 x
config urati on
Tab le 162 Configure basic 802.1x functions
Operation Command Remarks
Enter system view system-view -
Enable 802.1x globally dot1x Required
By default, 802.1x is disabled
globally.
To Next Page
Loading...
