Example For Aaa - TP-Link T1600G-18TS Configuration Manual

Configuring Network Security
Verify the configurations of 802.1X authentication on the port:
Switch_A#show dot1x interface
Port
----
Gi1/0/1
Gi1/0/2
Gi1/0/3
......
Verify the configurations of RADIUS :
Switch_A#show aaa global
AAA global status:
Module
Telnet
Ssh
Http
Switch_A#show aaa authentication dot1x
Methodlist
default
Switch_A#show aaa group radius1
192.168.0.10

8.3 Example for AAA

8.3.1 Network Requirements
As shown below, the switch needs to be managed remotely via Telnet. In addition, the
senior administrator of the company wants to create an account for the less senior
administrators, who can only view the configurations and some network information
without the Enable password provided.
Two RADIUS servers are deployed in the network to provide a safer authenticate method
for the administrators trying to log in or get administrative privileges. If RADIUS Server 1
State GuestVLAN PortControl PortMethod
----- ---------
enabled disabled
disabled disabled
disabled disabled
Enable
Login List Enable List
default default
default default
default default
pri1 pri2
radius1 --
----------- ----------
auto mac-based
auto mac-based
auto mac-based
pri3 pri4
-- --
Configuration Examples
Authorized LAG
---------- ---
authorized N/A
authorized N/A
authorized N/A
Configuration Guide 616