2-20
Figure 2-13 Network diagram when the client passes authentication
Configuration procedure
z The following configuration procedure uses many AAA/RADIUS commands. For detailed
configuration of these commands, refer to AAA Configuration in the Security Volume.
z Configurations on the 802.1X client and RADIUS server are omitted.
# Configure RADIUS scheme 2000.
<Device> system-view
[Device] radius scheme 2000
[Device-radius-2000] primary authentication 10.11.1.1 1812
[Device-radius-2000] primary accounting 10.11.1.1 1813
[Device-radius-2000] key authentication abc
[Device-radius-2000] key accounting abc
[Device-radius-2000] user-name-format without-domain
[Device-radius-2000] quit
# Configure authentication domain system and specify to use RADIUS scheme 2000 for users of the
domain.
[Device] domain system
[Device-isp-system] authentication default radius-scheme 2000
[Device-isp-system] authorization default radius-scheme 2000
[Device-isp-system] accounting default radius-scheme 2000
[Device-isp-system] quit
# Enable 802.1X globally.
[Device] dot1x
# Enable 802.1X for port GigabitEthernet 1/0/2.
To Next Page
Loading...
