port-based: All the clients connected to the port can access the network on the
condition that any one of the clients has passed the 802.1X Authentication.
Command Mode
Interface Configuration Mode (interface gigabitEthernet / interface range
gigabitEthernet)
Example
Configure the Control Type for port 1 as port-based:
TL-SG3424(config)# interface gigabitEthernet 1/0/1
TL-SG3424(config-if)# dot1x port-method port-based
radius
Description
The radius command is used to configure the parameters of radius.
Syntax
radius { [auth-pri ip] [auth-sec ip] [auth-port port] [acct-pri ip] [acct-sec ip]
[acct-port port] [auth-key { [ 0 ] password | 7 encrypted-password } ] [acct-key
{ [ 0 ] password | 7 encrypted-password] } }
no radius { auth-port | auth-key | auth-pri | auth-sec | acct-port | acct-key |
acct-pri | acct-sec }
Parameter
auth-pri ip —— The IP address of the authentication server.
auth-sec ip —— The IP address of the alternative authentication server.
auth-port port ——The UDP port of authentication server(s) ranging from 1 to
65535. The default value is 1812.
acct-pri ip —— The IP address of the accounting server.
acct-sec ip —— The IP address of the alternative accounting server.
acct-port port —— The UDP port of accounting server(s) ranging from 1 to
65535. The default value is 1813.
auth-key { [ 0 ] password | 7 encrypted-password } —— 0 and 7 are the
encryption type. 0 indicates that an unencrypted password will follow. 7 indicates
that a symmetric encrypted password with a fixed length will follow. By default,
the encryption type is 0. “password“ is the shared password for the switch and
the authentication servers to exchange messages which contains 31 characters
92
To Next Page
Loading...
