Zte ZXR10 8900 Series - Chapter 13 Network Management Configuration; NTP Configuration

Chapter11DOT1xConguration
DOT1xConfiguration
Examples
Dot1xRadiusAuthentication
Application
WorkstationofauserisconnectedtoEthernetAoftheEthernet
switch.ThisisshowninFigure30.
FIGURE30DOT1XRADIUSAUTHENTICATIONAPPLICATION
Thefollowingproceduresarerequiredtobeimplementedonthe
switch:
�Conductuseraccessauthenticationoneachporttocontrolthe
user’saccesstotheInternet.
�ItisrequiredthattheaccesscontrolmodeisMACaddress-
basedaccesscontrolmode.
�AllAAAaccessusersbelongtothedefaultdomainzte163.net.
�ThisauthenticationandRADIUSauthenticationareconducted
atthesametime.
�DisconnecttheuserandmakeitofineifRADIUSaccounting
fails.
�Donotaddthedomainnameaftertheusernameduringac-
cess.
�ConnecttheservergroupcomposedoftwoRADIUSservers
totheswitch.IPaddressesoftheseserversare10.1.1.1and
10.1.1.2respectively.Itisrequiredthattheformerserves
asthemasterauthentication/slaveaccountingserverandthe
latterservesastheslaveauthentication/masteraccounting
server .
�Settheencryptionkeytobe“aaazte”whenthesystemex-
changespacketswiththeauthenticationRADIUSserver .Set
thesystemtoresendpacketstotheRADIUSserverifnore-
sponsecomesfromthisserverwithinvesecondsafterthe
CondentialandProprietaryInformationofZTECORPORATION117