3Com MSR 50 Series Configuration Manual page 1808

1808 C 95: MAC A
HAPTER
C
UTHENTICATION ONFIGURATION
Set the offline detect timer to 180 seconds and the quiet timer to 3 minutes.
■
Network diagram
Figure 525 Network diagram for MAC authentication using RADIUS
GE 1/1
Host
Configuration procedure
1 Enable MAC authentication on the device
# Configure the IP addresses of the interfaces. (Omitted)
# Configure a RADIUS scheme.
<Sysname> system-view
[Device] radius scheme 2000
[Device-radius-2000] primary authentication 10.1.1.1 1812
[Device-radius-2000] primary accounting 10.1.1.2 1813
[Device-radius-2000] key authentication abc
[Device-radius-2000] key accounting abc
[Device-radius-2000] user-name-format without-domain
[Device-radius-2000] quit
# Configure an AAA scheme for ISP domain 2000.
[Device] domain 2000
[Device-isp-2000] authentication default radius-scheme 2000
[Device-isp-2000] authorization
[Device-isp-2000] accounting default radius-scheme 2000
[Device-isp-2000] quit
# Enable MAC authentication globally.
[Device] mac-authentication
# Enable MAC authentication for port GigabitEthernet 1/1.
[Device] mac-authentication interface gigabitethernet 1/1
# Configure the ISP domain for MAC authentication.
[Device] mac-authentication domain 2000
# Configure MAC authentication timers.
Authentication servers
(RADIUS server cluster)
10 .1.1.1
10 .1.1.2
IP network
Device
default radius-scheme 2000