Operation Manual – 802.1x
Quidway S3900 Series Ethernet Switches-Release 1510 Chapter 1 802.1x Configuration
Huawei Technologies Proprietary
1-21
# Enable 802.1x globally.
<Quidway> system-view
System View: return to User View with Ctrl+Z.
[Quidway] dot1x
# Enable 802.1x for Ethernet1/0/1 port.
[Quidway] dot1x interface Ethernet 1/0/1
# Set the access control method to be MAC-address-based ( can be omitted as
MAC-address-based is the default configuration).
[Quidway] dot1x port-method macbased interface Ethernet 1/0/1
# Create a RADIUS scheme named “radius1” and enter RADIUS scheme view.
[Quidway] radius scheme radius1
# Assign IP addresses to the primary authentication and accounting RADIUS servers.
[Quidway-radius-radius1] primary authentication 10.11.1.1
[Quidway-radius-radius1] primary accounting 10.11.1.2
# Assign IP addresses to the secondary authentication and accounting RADIUS server.
[Quidway-radius-radius1] secondary authentication 10.11.1.2
[Quidway-radius-radius1] secondary accounting 10.11.1.1
# Set the password for the switch and the authentication RADIUS servers to exchange
messages.
[Quidway -radius-radius1] key authentication name
# Set the password for the switch and the accounting RADIUS servers to exchange
messages.
[Quidway-radius-radius1] key accounting money
# Set the interval and the number of retries for the switch to send packets to the
RADIUS servers. # Set the timer and the number of times that a switch will resend
packets to the RADIUS server
[Quidway-radius-radius1] timer 5
[Quidway-radius-radius1] retry 5
# Set the timer for the switch to send real-time accounting packets to the RADIUS
servers.
[Quidway-radius-radius1] timer realtime-accounting 15
# Configure to send the user name to the RADIUS server with the domain name
removed beforehand.
[Quidway-radius-radius1] user-name-format without-domain
[Quidway-radius-radius1] quit
# Create the domain named “aabbcc.net” and enter its view.
[Quidway] domain enable aabbcc.net
To Next Page
Loading...
Need help?
General