Ruijie RG-S2900G-E Series - Page 510

Configuration Guide 802.1x Configuration
Ruijie# configure terminal
Ruijie(config)# radius-server host 192.168.4.12
Ruijie(config)# radius-server host 192.168.4.12 auth-port 600
Ruijie(config)# radius-server key MsdadShaAdasdj878dajL6g6ga
Ruijie(config)# end
 The officially agreed authentication UDP port is 1812.
 The officially agreed accounting UDP port is 1813.
 No less than 16 characters are recommended for the agreed password between the device and the Radius Server.
 The port of the device to connect the Radius Server shall be configured as uncontrolled port.
Setting the 802.1X Authentication Switch
When the 802.1x authentication is enabled, the switch will impose authentication over the host connected to the controlled
port, and the hosts that fail the authentication are not allowed to access the network.
In the privileged EXEC mode, you can enable the 1x authentication by performing the following steps:
Command
Function
Ruijie(config)#aaa new-model
Turn on the AAA switch.
Ruijie(config)#radius-server host ip-address [auth-port
port ] [acct-port port]
Configure the RADIUS server.
Ruijie(config)#radius-server key string
Configure RADIUS Key.
Ruijie(config)#aaa authentication dot1x auth group radius
Configure the dot1x authentication method list.
Ruijie(config)#dot1x authentication auth
dot1x applies authentication method list
Ruijie#show running-config
Show the configuration.
In case of the domain-name-based AAA service switch is enabled, that is when the aaa domain enable
command is configured, the authentication method list chosen by the dot1x authentication command will
not be used. Instead, the authentication method list configured by the domain where the user locates will be
used. For detailed configuration, see Configuring the AAA Service Based on Domain Names.
The following example enables 802.1x authentication:
Ruijie# configure terminal
Ruijie(config)# aaa new-model
Ruijie(config)# radius-server host 192.168.217.64
Ruijie(config)# radius-server key starnet
Ruijie(config)# aaa authentication dot1x authen group radius
Ruijie(config)# dot1x authentication authen
Ruijie(config)# end
Ruijie# show running-config
!
aaa new-model
!