Radius Configuration Example - HP 1920 Gigabit Ethernet Switch Series User Manual
Hp 1920 gigabit ethernet switch series
Hide thumbs
Also See for 1920 Gigabit Ethernet Switch Series:
- User manual (547 pages) ,
- Getting started manual (33 pages) ,
- Supplementary manual (63 pages)
Table of Contents
Advertisement
Table 116 Configuration items
Item
Server Type
IP Address
Port
Key
Confirm Key
RADIUS configuration example
Network requirements
As shown in
implement RADIUS authentication and accounting for the 802.1X user. RADIUS accounting records the
online duration of the 802.1X user.
Configure RADIUS servers on CAMS or IMC to use the default port for authentication and accounting.
The 802.1X user's username and password and the shared key expert are configured for packet
exchange with the switch.
On the switch, configure the shared key for packet exchange with the RADIUS server as expert, and
configure the system to remove the domain name of a username before sending it to the RADIUS server.
On the switch, enable the Telnet server function, and configure the switch to use AAA for authentication,
authorization and accounting of Telnet users.
Figure 354 Network diagram
Configuration prerequisites
Enable 802.1X globally and on the specified port. Configure network access control based on MAC
addresses. (Details not shown.)
Configuring a RADIUS scheme
1.
Select Authentication > RADIUS from the navigation tree.
2.
Click Add to add a RADIUS scheme:
a.
Enter system as the scheme name.
b.
Select Extended as the server type.
Description
Select the type of the RADIUS server to be configured. Options include primary authentication
server, primary accounting server, secondary authentication server, and secondary accounting
server.
Specify the IPv4 or IPv6 address of the RADIUS server.
The IP addresses of the primary and secondary servers for a scheme must be different.
Otherwise, the configuration fails.
RADIUS server addresses in the same scheme must use the same IP version.
Specify the UDP port of the RADIUS server.
Specify the shared key for communication with the RADIUS server.
If no shared key is specified, the shared key specified in the common configuration part is used.
Figure
354, an 802.1X user logs in to the switch from the host. Configure the switch to
374
Hide quick links:
Advertisement
Table of Contents
