730 CHAPTER 50: 802.1X CONFIGURATION
■ Specify the switch to try up to five times at an interval of 5 seconds in
transmitting a packet to the RADIUS server until it receives a response from the
server, and to send real time accounting packets to the accounting server every
15 minutes.
■ Specify the switch to remove the domain name from the username before
passing the username to the RADIUS server.
■ Set the username of the 802.1x user as localuser and the password as localpass
and specify to use plain text mode. Enable the idle cut function to get the user
offline whenever the user remains idle for over 20 minutes.
Network diagram
Figure 219 Network diagram for 802.1x configuration
Configuration procedure
n
The following configuration procedure covers most AAA/RADIUS configuration
commands for the authenticator, while configuration on the supplicant and
RADIUS server are omitted. For information about AAA/RADIUS configuration
commands, refer to “Configuring AAA” on page 758 and “Configuring RADIUS”
on page 765.
# Configure the IP addresses for each interface. (Omitted)
# Add local access user localuser, enable the idle cut function, and set the idle cut
interval.
<Sysname> system-view
[Sysname] local-user localuser
[Sysname-luser-localuser] service-type lan-access
[Sysname-luser-localuser] password simple localpass
[Sysname-luser-localuser] attribute idle-cut 20
[Sysname-luser-localuser] quit
# Create RADIUS scheme radius1 and enter its view.
[Sysname] radius scheme radius1
# Configure the IP addresses of the primary authentication and accounting
RADIUS servers.
Internet
Switch
Authenticator
Supplicant
GE1/0/1
1.1.1.1/24
Authentication servers
(RADIUS server cluster)
10.1.1.1
10.1.1.2
To Next Page
Loading...
