Operation Manual – AAA & RADIUS & HWTACACS & EAD
Quidway S5600 Series Ethernet Switches-Release 1510 Chapter 2
EAD Configuration
Huawei Technologies Proprietary
2-4
II. Network diagram
GE 1/0/1
Security policy Servers Virus Patch Servers
(IP Address: 10.110.91.168 )
Virus Patch S
(IP Address: 10.110.91.168 )
Authentication Servers
(IP Address 10.110.91.164 )
InternetInternet
user
(IP Address: 10.110.91.166 )
Figure 2-2 EAD configuration example
III. Configuration procedure
# Configure 802.1X on the switch. Refer to the 802.1X module in Quidway S5600
Series Ethernet Switches Operation Manual for detailed description.
# Configure domain.
<Quidway> system-view
[Quidway] domain system
[Quidway-isp-system] quit
# Configure RADIUS scheme.
[Quidway] radius scheme cams
[Quidway-radius-cams] primary authentication 10.110.91.164 1812
[Quidway-radius-cams] key authentication expert
[Quidway-radius-cams] accounting optional
[Quidway-radius-cams] server-type huawei
# Configure the IP address for the security policy server.
[Quidway-radius-cams] security-policy-server 10.110.91.166
# Associate domain with RADIUS scheme.
[Quidway-radius-cams] quit
[Quidway] domain system
[Quidway-isp-system] radius-scheme cams