Huawei Quidway S9300 Configuration Manual page 107

Quidway S9300 Terabit Routing Switch
Configuration Guide - Security
# Set the IP address and port number of the primary RADIUS authentication server.
[Quidway-radius-rd1] radius-server authentication 192.168.2.30 1812
# Set the key and retransmission count of the RADIUS server.
[Quidway-radius-rd1] radius-server shared-key cipher hello
[Quidway-radius-rd1] radius-server retransmit 2
[Quidway-radius-rd1] quit
Step 2 Create an authentication scheme web1 and set the authentication method to RADIUS
authentication.
[Quidway] aaa
[Quidway-aaa] authentication-scheme web1
[Quidway-aaa-authen-1] authentication-mode radius
[Quidway-aaa-authen-1] quit
Step 3 Create a domain isp1 and bind the authentication scheme and RADIUS server template to the
domain.
[Quidway-aaa] domain isp
[Quidway-aaa-domain-isp1] authentication-scheme web1
[Quidway-aaa-domain-isp1] radius-server rd1
Step 4 Configure the 802.1x authentication function.
# Enable 802.1x authentication globally and on GE 1/0/0.
[Quidway] dot1x
[Quidway] interface gigabitethernet1/0/0
[Quidway-GigabitEthernet1/0/0] dot1x
# Set the maximum number of access users on GE 1/0/0.
[Quidway-GigabitEthernet1/0/0] dot1x max-user 100
# Configure MAC address bypass authentication.
[Quidway-GigabitEthernet1/0/0] dot1x mac-bypass
Step 5 Verify the configuration.
Run the display dot1x interface command on the S9300, and you can view the configuration
and statistics of 802.1x authentication.
<Quidway> display dot1x interface GigabitEthernet 1/0/0
GigabitEthernet1/0/0 current state : UP
802.1x protocol is Enabled[mac-bypass]
The port is an authenticator
Port control type is Auto
Authentication method is MAC-based
Reauthentication is disabled
Max online user is 100
Current online user is 1
Guest VLAN is disabled
Authentication Success: 4
EAPOL Packets: TX
Sent
Received
Issue 06 (2010–01–08)
: 8
EAPOL Request/Identity Packets
EAPOL Request/Challenge Packets : 4
Multicast Trigger Packets
DHCP Trigger Packets
EAPOL Success Packets
EAPOL Failure Packets
EAPOL Start Packets
EAPOL LogOff Packets
EAPOL Response/Identity Packets : 4
EAPOL Response/Challenge Packets: 4
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
Failure: 0
RX : 16
: 4
: 0
: 0
: 4
: 0
: 4
: 3
2 NAC Configuration
2-37