Enterasys C5G124-24 - Page 164

Configuring Authentication
10-24 Configuring User Authentication
The following code example:
• Creates and names two VLANS, one for the users and one for the phones.
• Creates a CoS setting of index 55.
• Sets the number of users to 2 on all the user ports.
• Creates a user policy profile that uses the user VLAN.
• Creates a policy profile for the phones and a policy rule that maps tagged frames on the user
ports to that policy profile.
• Minimally configures RADIUS, 802.1x, and MAC authentication.
A4(su)->set vlan create 208
A4(su)->set vlan name 208 Sales
A4(su)->set vlan create 44
A4(su)->set vlan name 44 Phones
A4(su)->set cos settings 55 priority 6
A4(su)->set multiauth port numusers 2 fe.1.1-22
A4(su)->set policy profile 2 name “Sales Group” pvid-status enable pvid 208
untagged-vlans 208
A4(su)->set policy profile 144 name “Phone Group” cos-status enable cos 55
A4(su)->set policy rule admin-profile vlantag 44 admin-pid 144 port-string
fe.1.1-22
A4(su)->set radius enable
A4(su)->set radius server 1 192.168.10.10 1812 sharedsecret
A4(su)->set multiauth mode multi
A4(su)->set dot1x enable
A4(su)->set macauthentication enable
A4(su)->set macauthentication password mypass
A4(su)->set macauthentication port enable fe.1.1-22