D-Link DWS-1008 User Manual page 321

DWS-1008 User's Manual
for all 802.1X network users. This example includes local usernames, passwords, and
membership in a VLAN. This example includes one username and an optional attribute for
session-timeout in seconds. Because the switch requires a certificate for authentication,
configuration of a self-signed certificate is shown.
1. To set authentication for all 802.1X users of SSID thiscorp, type the following
command:
DWS-1008# set authentication dot1x ssid thiscorp * peap-mschapv2 local
2. To add user Natasha to the local database on the switch, type the following
command:
DWS-1008# set user Natasha password moon
3. To assign Natasha to a VLAN named red, type the following command:
DWS-1008# set user Natasha attr vlan-name red
4. To assign Natasha a session timeout value of 1200 seconds, type the following
command:
DWS-1008# set user Natasha attr session-timeout 1200
5. To generate a public-private key pair and a self-signed EAP certificate, type the
following commands:
DWS-1008# crypto generate key eap 1024
key pair generated
DWS-1008# crypto generate self-signed eap
Country Name: US
State Name: CA
Locality Name: Campus1
Organizational Name: Example
Organizational Unit: IT
Common Name: SW33
Email Address: admin@example.com
Unstructured Name: wiring closet 22
6. Save the configuration:
DWS-1008 save config
success: configuration saved.
Enabling PEAP-MS-CHAP-V2 Offload
The following example illustrates how to enable PEAP-MS-CHAP-V2 offload. In this example,
D-Link Systems, Inc.
Configuring AAA for Network Users
316