3Com 5500 Switch User Manual


 
172 CHAPTER 18: AAA CONFIGURATION GUIDE
Configuration Procedure # Create a RADIUS scheme named cams and specify the primary and secondary
servers.
<3Com> system-view
[3Com] radius scheme cams
[3Com-radius-cams] primary authentication 192.168.1.19
[3Com-radius-cams] primary accounting 192.168.1.19
[3Com-radius-cams] secondary authentication 192.168.1.20
[3Com-radius-cams] secondary accounting 192.168.1.20
# Set the shared key for message exchange with the authentication and
accounting RADIUS servers to expert.
[3Com-radius-cams] key authentication expert
[3Com-radius-cams] key accounting expert
# Configure the switch to send a username with the domain name.
[3Com-radius-cams] user-name-format with-domain
# Specify the server type as extended.
[3Com-radius-cams] server-type extended
# Create an ISP domain named abc, bind RADIUS scheme cams for
authentication, and configure dynamic VLAN assignment.
[3Com] domain abc
[3Com-isp-abc] radius-scheme cams
[3Com-isp-abc] vlan-assignment-mode integer
[3Com-isp-abc] quit
# Configure the ISP domain abc as the default ISP domain.
[3Com] domain default enable abc
# Enable guest VLAN on the port.
[3Com] interface Ethernet 1/0/3
[3Com-Ethernet1/0/3] dot1x port-method portbased
[3Com-Ehternet1/0/3] dot1x guest-vlan 10
# Enabled 802.1x.
[3Com] dot1x
# Enable 802.1x in interface view.
[3Com] interface Ethernet 1/0/3
[3Com-Ethernet1/0/3] dot1x
Complete Configuration #
system-view
Switch 4210 Release V03.01.00 All versions
Product series Software version Hardware version