Implementing the AAA and RADIUS Protocols 215
[SW7750-radius-radius1]primary authentication 10.11.1.1
[SW7750-radius-radius1]primary accounting 10.11.1.2
5 Set the IP address of the second authentication/accounting RADIUS servers.
[SW7750-radius-radius1]secondary authentication 10.11.1.2
[SW7750-radius-radius1]secondary accounting 10.11.1.1
6 Set the encryption key when the system exchanges packets with the
authentication RADIUS server.
[SW7750-radius-radius1]key authentication name
7 Set the encryption key when the system exchanges packets with the accounting
RADIUS server.
[SW7750-radius-radius1]key accounting money
8 Set the timeouts and times for the system to retransmit packets to the RADIUS
server.
[SW7750-radius-radius1]timer 5
[SW7750-radius-radius1]retry 5
9 Set the interval for the system to transmit real-time accounting packets to the
RADIUS server.
[SW7750-radius-radius1]timer realtime-accounting 15
10 Configure the system to transmit the user name to the RADIUS server after
removing the domain name.
[SW7750-radius-radius1]user-name-format without-domain
[SW7750-radius-radius1]quit
11 Create the user domain 3com163.net and enters isp configuration mode.
[SW7750]domain 3com163.net
12 Specify radius1 as the RADIUS server group for the users in the domain
3com163.net.
[SW7750-isp-3com163.net]radius-scheme radius1
13 Set a limit of 30 users to the domain 3com163.net.
[SW7750-isp-3com163.net]access-limit enable 30
14 Enable idle cut function for the user and set the idle cut parameter in the domain
3com163.net.
[SW7750-isp-3com163.net]idle-cut enable 50 5000
15 Add a local supplicant and set its parameter.
[SW7750]local-user localuser
[SW7750-luser-localuser]attribute service-type lan-access
[SW7750-luser-localuser]password simple localpass
16 Enable the 802.1x globally.
[SW7750]dot1x
Implementing the
AAA and RADIUS
Protocols
The Authentication, Authorization, and Accounting (AAA) protocol provides a
uniform framework for configuring these three security functions and implements
network security management.