H3C S3100 8C SI - Page 438

Operation Manual – AAA
H3C S3100 Series Ethernet Switches Chapter 3 EAD Configuration
3-4
II. Network diagram
Ethernet1/0/1
Internet
User
Security Policy Servers
10.110.91.166
Virus Patch Servers
10.110.91.168
Authentication Servers
10.110.91.164
Figure 3-2 EAD configuration
III. Configuration procedure
# Configure 802.1x on the switch. Refer to the section ”Configuring 802.1x” of 802.1x
Configuration.
# Configure a domain.
<Sysname> system-view
[Sysname] domain system
[Sysname-isp-system] quit
# Configure a RADIUS scheme.
[Sysname] radius scheme cams
[Sysname-radius-cams] primary authentication 10.110.91.164 1812
[Sysname-radius-cams] accounting optional
[Sysname-radius-cams] key authentication expert
[Sysname-radius-cams] server-type extended
# Configure the IP address of the security policy server.
[Sysname-radius-cams] security-policy-server 10.110.91.166
# Associate the domain with the RADIUS scheme.
[Sysname-radius-cams] quit
[Sysname] domain system
[Sysname-isp-system] radius-scheme cams