Radius Server - Huawei Quidway S3700 Series Configuration Manual

Quidway S3700 Series Ethernet Switches
Configuration Guide - Security
Figure 2-5 Networking diagram for configuring 802.1x authentication
Configuration Roadmap
The configuration roadmap is as follows:
1.
2.
3.
4.
5.
6.
Data Preparation
To complete the configuration, you need the following data:
l
l
l
l
l
l
Procedure
Step 1 Configure a RADIUS server template.
# Configure a RADIUS server template rd1.
[Quidway] radius-server template rd1
Issue 01 (2011-07-15)
192.168.1.1/24
PC
192.168.1.10
Configure the RADIUS authentication server to deliver the authorization ACL.
Configure a RADIUS server template.
Configure an AAA authentication template.
Configure a domain.
Configure an ACL, which is the same as the ACL on the RADIUS server, on the Switch
and configure the ACL rules.
Configure 802.1x authentication.
IP address of the RADIUS authentication server: 100.1.1.1; authentication port number:
1812
RADIUS server template: rd1
Shared key of the RADIUS server: hello
AAA authentication scheme: web1
Domain: isp1
ACL number: 3000
NOTE
In this example, only the configuration of the Switch is provided, and the configuration of RADIUS server
is not mentioned here.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
Radius
Server
100.1.1.1
100.1.1.2
192.168.1.2/24
Switch
2 NAC Configuration
HTTP
Server
Internet
101.0.0.2
84