Zte ZXR10 5900 Series - Dot1 x Radius Authentication Application

Chapter12DOT1XConguration
DOT1XConfiguration
Example
Dot1xRadiusAuthentication
Application
WorkstationofauserisconnectedtoEthernetAoftheEthernet
switch.ThisisshowninFigure29.
FIGURE29DOT1XRADIUSAUTHENTICATIONAPPLICATION
Thefollowingneedstobeimplementedontheswitch:
�Conductuseraccessauthenticationoneachporttocontrolthe
user’saccesstotheInternet.
�ItisrequiredthattheaccesscontrolmodeisMACaddress-
basedaccesscontrolmode.
�AlltheAAAaccessusersbelongtothedefaultdomain
zte163.net.
�ThisauthenticationandRADIUSauthenticationareconducted
atthesametime.
�DisconnecttheuserandmakeitofineifRADIUSaccounting
fails.
�Donotaddthedomainnameaftertheusernameduringac-
cess.
�ConnecttheservergroupcomposedoftwoRADIUSservers
totheswitch.IPaddressesoftheseserversare10.1.1.1and
10.1.1.2respectively.Itisrequiredthattheformerservesas
themasterauthentication/slavechargingserverandthelatter
servesastheslaveauthentication/masterchargingserver .
CondentialandProprietaryInformationofZTECORPORATION137