H3C S3610-28P Operation Manual page 894

Operation Manual – 802.1x-HABP-MAC Authentication
H3C S3610&S5510 Series Ethernet Switches
Figure 1-13 Network diagram when the supplicant passes authentication
III. Configuration procedure
# Configure RADIUS scheme 2000.
<Sysname> system-view
[Sysname] radius scheme 2000
[Sysname-radius-2000] primary authentication 10.11.1.1 1812
[Sysname-radius-2000] primary accounting 10.11.1.1 1813
[Sysname-radius-2000] key authentication abc
[Sysname-radius-2000] key accounting abc
[Sysname-radius-2000] user-name-format without-domain
[Sysname-radius-2000] quit
# Configure domain system and specify to use RADIUS scheme 2000 for users of the
domain.
[Sysname] domain system
[Sysname-isp-system] authentication default radius-scheme 2000
[Sysname-isp-system] authorization
[Sysname-isp-system] accounting default radius-scheme 2000
[Sysname-isp-system] quit
# Enable 802.1x globally.
[Sysname] dot1x
# Enable 802.1x for port Ethernet 1/0/1.
[Sysname] interface Ethernet 1/0/1
[Sysname-Ethernet1/0/1] dot1x
# Set the port access control method to portbased.
default radius-scheme 2000
1-23
Chapter 1 802.1x Configuration