Table of Contents
Advertisement
WX1200# display aaa
Default Values
authport=1812 acctport=1813 timeout=5 acct-timeout=5
retrans=3 deadtime=0 key=(null) author-pass=(null)
Radius Servers
Server
-------------------------------------------------------------------
set accounting dot1x ssid mycorp EXAMPLE\* stop-only local
set authentication dot1x ssid mycorp EXAMPLE\* pass-through shorebirds
user tech
Password = 1315021018 (encrypted)
user EXAMPLE/nin
filter-id = acl.101.in
mobility-profile = tulip
user EXAMPLE/tamara
filter-id = acl.101.in
mobility-profile = tulip
...
Enabling RADIUS
Pass-Through
Authentication
Users at EXAMPLE are now restricted to ports 2 and 5, as specified in the
tulip Mobility Profile configuration.
7 Use the display aaa command to verify your configuration. Type the
following command:
Addr
8 Save the configuration:
WX1200# save config
success: configuration saved.
The following example illustrates how to enable RADIUS pass-through
authentication for all 802.1X network users:
1 Configure the RADIUS server r1 at IP address 10.1.1.1 with the string
sunny for the key. Type the following command:
WX1200# set radius server r1 address 10.1.1.1 key sunny
2 Configure the server group sg1 with member r1. Type the following
command:
WX1200# set server group sg1 members r1
3 Enable all 802.1X users of SSID mycorp to authenticate via pass-through
to server group sg1. Type the following command:
WX1200# set authentication dot1x ssid mycorp *
pass-through sg1
Network User Configuration Scenarios
Ports
T/o Tries Dead State
337
Advertisement
Table of Contents
