Radius Configuration Example - HP 1920 Series User Manual

Table 116 Configuration items

RADIUS configuration example

Network requirements
As shown in
implement RADIUS authentication and accounting for the 802.1X user. RADIUS accounting records the
online duration of the 802.1X user.
Configure RADIUS servers on CAMS or IMC to use the default port for authentication and accounting.
The 802.1X user's username and password and the shared key expert are configured for packet
exchange with the switch.
On the switch, configure the shared key for packet exchange with the RADIUS server as expert, and
configure the system to remove the domain name of a username before sending it to the RADIUS server.
On the switch, enable the Telnet server function, and configure the switch to use AAA for authentication,
authorization and accounting of Telnet users.
Figure 354 Network diagram
Configuration prerequisites
Enable 802.1X globally and on the specified port. Configure network access control based on MAC
addresses. (Details not shown.)
Configuring a RADIUS scheme
1.
2.
Downloaded from www.Manualslib.com
Item Description
Select the type of the RADIUS server to be configured. Options include primary authentication
Server Type server, primary accounting server, secondary authentication server, and secondary accounting
server.
Specify the IPv4 or IPv6 address of the RADIUS server.
The IP addresses of the primary and secondary servers for a scheme must be different.
IP Address
Otherwise, the configuration fails.
RADIUS server addresses in the same scheme must use the same IP version.
Port Specify the UDP port of the RADIUS server.
Key Specify the shared key for communication with the RADIUS server.
Confirm Key If no shared key is specified, the shared key specified in the common configuration part is used.
Figure 354, an 802.1X user logs in to the switch from the host. Configure the switch to
Select Authentication > RADIUS from the navigation tree.
Click Add to add a RADIUS scheme:
a. Enter system as the scheme name.
b. Select Extended as the server type.
manuals search engine
374