3Com MSR 50 Series Configuration Manual page 1866

1866 C 98: P
HAPTER ORTAL
n
C
ONFIGURATION
Network diagram
Figure 542 Network diagram for portal+ direct authentication
2.2.2.1 /24
Host
2.2.2 .2/24
Gateway : 2.2.2.1 /24
Configuration procedure
IP addresses are configured for devices as required and routes are available
between devices before the portal+ feature is enabled.
Configure the access device:
1 Configure a RADIUS scheme
# Create a RADIUS scheme named "rs1" and enter the scheme view.
<Router> system-view
[Router] radius scheme rs1
# Set the server type to "extended".
[Router-radius-rs1] server-type extended
# Configure the primary authentication server, the primary accounting server, and
the keys for both servers to communicate.
[Router-radius-rs1] primary authentication 192.168.0.112
[Router-radius-rs1] primary accounting 192.168.0.112
[Router-radius-rs1] key accounting radius
[Router-radius-rs1] key authentication radius
[Router-radius-rs1] user-name-format without-domain
# Configure the IP address of the security policy server.
[Router-radius-rs1] security-policy-server 192.168.0.113
[Router-radius-rs1] quit
2 Configure an authentication domain
# Create an ISP domain named "dm1" and enter the domain view.
[Router] domain dm1
Eth1/0
Eth1/1
192 .168 .0 .100 /24
Router
Portal server
192 .168.0.111/24
RADIUS server
192 .168.0.112/24
Security policy server
192 .168 .0.113 /24