802.1x Configuration Example 731
[Sysname-radius-radius1] primary authentication 10.1.1.1
[Sysname-radius-radius1] primary accounting 10.1.1.2
# Configure the IP addresses of the secondary authentication and accounting
RADIUS servers.
[Sysname-radius-radius1] secondary authentication 10.1.1.2
[Sysname-radius-radius1] secondary accounting 10.1.1.1
# Specify the shared key for the device to exchange packets with the
authentication server and the accounting server.
[Sysname-radius-radius1] key authentication secret
# Set the interval for the device to retransmit packets to the RADIUS server and the
maximum number of transmission attempts.
[Sysname-radius-radius1] timer response-timeout 5
[Sysname-radius-radius1] retry 5
# Set the interval for the device to send real time accounting packets to the
RADIUS server.
[Sysname-radius-radius1] timer realtime-accounting 15
# Specify the device to remove the domain name of any username before passing
the username to the RADIUS server.
[Sysname-radius-radius1] user-name-format without-domain
[Sysname-radius-radius1] quit
# Create domain aabbcc.net and enter its view.
[Sysname] domain aabbcc.net
# Set radius1 as the RADIUS scheme for users of the domain and specify to use
local authentication as the secondary scheme.
[Sysname-isp-aabbcc.net] authentication default radius-scheme radius
1 local
[Sysname-isp-aabbcc.net] authorization default radius-scheme radius1
local
[Sysname-isp-aabbcc.net] accounting default radius-scheme radius1 lo
cal
# Set the maximum number of users for the domain as 30.
[Sysname-isp-aabbcc.net] access-limit enable 30
# Enable the idle cut function and set the idle cut interval.
[Sysname-isp-aabbcc.net] idle-cut enable 20
[Sysname-isp-aabbcc.net] quit
# Configure aabbcc.net as the default domain.
[Sysname] domain default enable aabbcc.net
To Next Page
Loading...
