3Com Switch 4800G 24-Port Configuration Manual page 744

744 C 52: MAC A
HAPTER
C
UTHENTICATION ONFIGURATION
Network diagram
Figure 225 Network diagram for MAC authentication using RADIUS
Supplicant
Configuration procedure
1 Configure MAC authentication on the device
# Configure the IP addresses of the interfaces. (Omitted)
# Configure a RADIUS scheme.
<Sysname> system-view
[Sysname] radius scheme 2000
[Sysname-radius-2000] primary authentication 10.1.1.1 1812
[Sysname-radius-2000] primary accounting 10.1.1.2 1813
[Sysname-radius-2000] key authentication abc
[Sysname-radius-2000] key accounting abc
[Sysname-radius-2000] user-name-format without-domain
[Sysname-radius-2000] quit
# Specify the AAA schemes for the ISP domain.
[Sysname] domain 2000
[Sysname-isp-2000] authentication default radius-scheme 2000
[Sysname-isp-2000] authorization default radius-scheme 2000
[Sysname-isp-2000] accounting default radius-scheme 2000
[Sysname-isp-2000] quit
# Enable MAC authentication globally.
[Sysname] mac-authentication
# Enable MAC authentication for port GigabitEthernet 1/0/1.
[Sysname] mac-authentication interface GigabitEthernet 1/0/1
# Specify the ISP domain for MAC authentication.
[Sysname] mac-authentication domain 2000
# Set the MAC authentication timers.
[Sysname] mac-authentication timer offline-detect 180
[Sysname] mac-authentication timer quiet 3
Authentication servers
(RADIUS server cluster)
10 .1.1.1
10 .1.1.2
GE1 /0/1
Authenticator
1.1 .1.1/24
Switch
Internet