HP 3600 v2 Series Security Configuration Manual page 73

On the port group configuration page, click Add to enter the page for adding a port group, as shown
in Figure 25. Perform the following configurations:
Type the port group name.
•
Select the configured IP address group. The IP address used by the user to access the network must
•
be within this IP address group.
• Use the default settings for other parameters and click OK to finish the operation.
Figure 25 Port group configuration
# Select User Access Manager > Service Parameters > Validate System Configuration from the
navigation tree to validate the configurations.
Configure the switch
3.
Configure a RADIUS scheme
•
# Create a RADIUS scheme named rs1 and enter its view.
<Switch> system-view
[Switch] radius scheme rs1
# Set the server type for the RADIUS scheme. When you use the iMC server, set the server type to
extended.
[Switch-radius-rs1] server-type extended
# Specify the primary authentication server and primary accounting server, and configure the keys for
communication with the servers.
[Switch-radius-rs1] primary authentication 10.1.1.1
[Switch-radius-rs1] primary accounting 10.1.1.1
[Switch-radius-rs1] key authentication expert
[Switch-radius-rs1] key accounting expert
# Configure the scheme to include the domain names in usernames to be sent to the RADIUS server.
[Switch-radius-rs1] user-name-format with-domain
[Switch-radius-rs1] quit
• Configure an authentication domain
# Create an ISP domain named dm1 and enter its view.
62