3Com Switch 4800G 24-Port Configuration Manual page 730

730 C 50: 802.1
HAPTER X
n
C
ONFIGURATION
Specify the switch to try up to five times at an interval of 5 seconds in
■
transmitting a packet to the RADIUS server until it receives a response from the
server, and to send real time accounting packets to the accounting server every
15 minutes.
Specify the switch to remove the domain name from the username before
■
passing the username to the RADIUS server.
Set the username of the 802.1x user as localuser and the password as localpass
■
and specify to use plain text mode. Enable the idle cut function to get the user
offline whenever the user remains idle for over 20 minutes.
Network diagram
Figure 219 Network diagram for 802.1x configuration
Supplicant
Configuration procedure
The following configuration procedure covers most AAA/RADIUS configuration
commands for the authenticator, while configuration on the supplicant and
RADIUS server are omitted. For information about AAA/RADIUS configuration
commands, refer to "Configuring AAA" on page 758 and "Configuring RADIUS"
on page 765.
# Configure the IP addresses for each interface. (Omitted)
# Add local access user localuser, enable the idle cut function, and set the idle cut
interval.
<Sysname> system-view
[Sysname] local-user localuser
[Sysname-luser-localuser] service-type lan-access
[Sysname-luser-localuser] password simple localpass
[Sysname-luser-localuser] attribute idle-cut 20
[Sysname-luser-localuser] quit
# Create RADIUS scheme radius1 and enter its view.
[Sysname] radius scheme radius1
# Configure the IP addresses of the primary authentication and accounting
RADIUS servers.
Authentication servers
(RADIUS server cluster)
10 .1.1.1
10 .1.1.2
GE1 /0/1 Authenticator
1.1 .1.1/24
Switch
Internet