HP A6600 Configuration Manual page 105

Configuration procedure
Configure the 802.1X client. If HP iNode is used, do not select the Carry version info option in the
1.
client configuration. (Configuration omitted)
Configure the RADIUS servers, and add user accounts for the 802.1X users. (Configuration omitted)
2.
Assign an IP address for each interface on the access device. (Omitted)
3.
Configure user accounts for the 802.1X users on the access device.
4.
# Add a local user with username localuser and password localpass in plaintext. (Make sure that the
username and password are the same as those configured on the RADIUS server.)
<Router> system-view
[Router] local-user localuser
[Router-luser-localuser] service-type lan-access
[Router-luser-localuser] password simple localpass
# Configure the idle cut function to log off any online user who has been idle for 20 minutes.
[Router-luser-localuser] authorization-attribute idle-cut 20
[Router-luser-localuser] quit
Configure a RADIUS scheme.
5.
# Create the RADIUS scheme radius1 and enter its view.
[Router] radius scheme radius1
# Specify the IP addresses of the primary authentication and accounting RADIUS servers.
[Router-radius-radius1] primary authentication 10.1.1.1
[Router-radius-radius1] primary accounting 10.1.1.1
# Configure the IP addresses of the secondary authentication and accounting RADIUS servers.
[Router-radius-radius1] secondary authentication 10.1.1.2
[Router-radius-radius1] secondary accounting 10.1.1.2
# Specify the shared key between the access device and the authentication server.
[Router-radius-radius1] key authentication name
# Specify the shared key between the access device and the accounting server.
[Router-radius-radius1] key accounting money
# Exclude the ISP domain name from the username sent to the RADIUS servers.
[Router-radius-radius1] user-name-format without-domain
[Router-radius-radius1] quit
NOTE:
The router must use the same username format as the RADIUS server. If the RADIUS server includes the
ISP domain name in the username, the access device must also include it.
93