344
Advanced port security mode configuration example
Network requirements
As shown in Figure 346, a client is connected to the switch through port GigabitEthernet 1/0/1. The
switch authenticates the client with a RADIUS server. If the authentication succeeds, the client is
authorized to access the Internet.
• The RADIUS server at 192.168.1.2 functions as the primary authentication server and primary
accounting server. The shared key for secure authentication communication is name, and the
shared key for secure accounting communication is money.
• All users use the default authentication, authorization, and accounting methods of ISP domain
system.
• The switch sends usernames without domain names to the RADIUS server.
Configure port GigabitEthernet 1/0/1 of the switch to:
• Allow only one 802.1X user to be authenticated.
• Allow up to three OUI values to be configured and allow one terminal that uses any of the OUI
values to access the port in addition to an 802.1X user.
Figure 346 Network diagram
Configuration prerequisites
Configure the host and RADIUS servers. (Details not shown.)
Configuring a RADIUS scheme
1. From the navigation tree, select Authentication > RADIUS.
The RADIUS Server tab appears.
2. Select Authentication Server from the Server Type list, enter 192.168.1.2 in the Primary Server IP
box and 1812 in the Primary Server UDP Port box, and select active from the Primary Server
Status list.
3. Click Apply.
To Next Page
Loading...
Need help?
General