viii
Portal authentication modes ······························································································································· 353
Portal support for EAP ········································································································································· 353
Layer 2 portal authentication process ··············································································································· 354
Layer 3 portal authentication process ··············································································································· 355
Configuring portal authentication ······························································································································ 357
Configuration prerequisites ································································································································ 357
Configuration task list ········································································································································· 358
Configuring the Layer 2 portal service ·············································································································· 359
Configuring the Layer 3 portal service ·············································································································· 361
Configuring advanced parameters for portal authentication ········································································· 364
Configuring a portal-free rule····························································································································· 365
Portal authentication configuration examples ··········································································································· 367
Configuring Layer 2 portal authentication ········································································································ 367
Configuring direct portal authentication ··········································································································· 375
Configuring cross-subnet portal authentication ································································································ 381
Configuring AAA ···················································································································································· 389
Overview ······································································································································································· 389
AAA application ·················································································································································· 389
Domain-based user management ······················································································································ 390
Configuration prerequisites ········································································································································· 390
Configuration procedure ············································································································································· 391
Configuring an ISP domain ········································································································································· 391
Configuring authentication methods for the ISP domain ························································································· 392
Configuring authorization methods for the ISP domain ··························································································· 394
Configuring accounting methods for the ISP domain ······························································································· 395
AAA configuration example ······································································································································· 397
Configuring RADIUS ··············································································································································· 402
Overview ······································································································································································· 402
Client/server model ············································································································································ 402
Security and authentication mechanisms ·········································································································· 402
Basic RADIUS message exchange process ······································································································ 403
RADIUS packet format ········································································································································ 404
Extended RADIUS attributes ······························································································································· 406
Protocols and standards ····································································································································· 407
Configuration guidelines ············································································································································· 407
Configuring RADIUS ···················································································································································· 408
Configuration procedure ···································································································································· 408
Configuring RADIUS servers ······························································································································ 408
Configuring RADIUS parameters ······················································································································· 410
RADIUS configuration example ·································································································································· 412
Configuring users ···················································································································································· 418
Configuring a local user ·············································································································································· 418
Configuring a user group ············································································································································ 420
Managing PKI ·························································································································································· 422
Overview ······································································································································································· 422
PKI terms ······························································································································································· 422
PKI architecture ···················································································································································· 422
PKI operation ······················································································································································· 423
PKI applications ··················································································································································· 424
Configuration guidelines ············································································································································· 424
Recommended configuration procedures ·················································································································· 424
Configuration procedure for manual requests ································································································· 425
To Next Page
Loading...
