HP A6600 Configuration Manual page 198

Figure 76 Network diagram for configuring the userLoginWithOUI mode
The following configuration steps cover some AAA/RADIUS configuration commands. For more
information about the commands, see
Configurations on the host and RADIUS servers are omitted.
Configuration procedure
Configure the RADIUS protocol.
1.
# Configure a RADIUS scheme named radsun.
<Router> system-view
[Router] radius scheme radsun
[Router-radius-radsun] primary authentication 192.168.1.2
[Router-radius-radsun] primary accounting 192.168.1.3
[Router-radius-radsun] secondary authentication 192.168.1.3
[Router-radius-radsun] secondary accounting 192.168.1.2
[Router-radius-radsun] key authentication name
[Router-radius-radsun] key accounting money
[Router-radius-radsun] timer response-timeout 5
[Router-radius-radsun] retry 5
[Router-radius-radsun] timer realtime-accounting 15
[Router-radius-radsun] user-name-format without-domain
[Router-radius-radsun] quit
# Configure ISP domain sun to use RADIUS scheme radsun for authentication, authorization, and
accounting of all types of users. Specify that the ISP domain can contain up to 30 users.
[Router] domain sun
[Router-isp-sun] authentication default radius-scheme radsun
[Router-isp-sun] authorization default radius-scheme radsun
[Router-isp-sun] accounting default radius-scheme radsun
[Router-isp-sun] access-limit enable 30
[Router-isp-sun] quit
Configure 802.1X.
2.
# Set the 802.1X authentication method to CHAP. (This configuration is optional. By default, the
authentication method is CHAP for 802.1X.)
[Router] dot1x authentication-method chap
"Configuring AAA."
186