Fujitsu PRIMERGY BX900 - Using Remote RADIUS Server

© 2011 Fujitsu Technology Solutions
56
15.2 Using Remote RADIUS Server
This section describes how to configure IEEE 802.1X authentication by using remote RADIUS
server.
Beginning in privileged EXEC mode, follow these steps to configure IEEE 802.1X
authentication:
Command Purpose
Step 1 configure Enter global configuration mode
Step 2 radius-server host auth
ip-addr/hostname
Create a radius server for IEEE 802.1X
authentication
Step 3 radius-server key auth
ip-addr/hostnam <0/7> key-value
Give s radius share key to a radius
server
Step 4 authentication login list-name radius Create a authentication list for radius
Step 5 dot1x system-auth-control Enable IEEE 802.1X authentication
support on the switch
Step 6 dot1x default-login list-name Assign an authentication list to IEEE
802.1X default login for non-configured
users
Step 7 exit Return to global configuration mode.
Step 8 show authentication Verify the configuration.
Step 9 show radius Verify the configuration.
To assign a remote radius server for IEEE 802.1X, use radius-server host auth
ip-addr/hostname. To create an authentication list for radius, use authentication login
list-name radius. To assign an authentication list for IEEE 802.1X non-configured users,
use dot1x default-login list-name.
In this example, a radius server 192.168.3.1 will be assigned to authenticate IEEE 802.1X
with share key secret.
(BX900-CB1)(Config)#radius-server host auth 192.168.3.1
(BX900-CB1)(Config)#radius-server key auth 192.168.3.1 0 secret
(BX900-CB1)(Config)#authentication login test-list radius
(BX900-CB1)(Config)#dot1x system-auth-control
(BX900-CB1)(Config)#dot1x default-login test-list
(BX900-CB1)(Config)#dot1x port-control all auto
(BX900-CB1)(Config)#exit
(BX900-CB1)#show authentication
Authentication Login List Method 1 Method 2 Method 3
------------------------- -------- -------- --------
defaultList local undefined undefined