H3C S5120-HI Security Configuration Manual page 71

Figure 15 Network diagram
Configuration prerequisites
Configure the interfaces and VLANs as shown in
manually or automatically and can access resources in the authorized VLAN after passing
authentication.
Configuring the RADIUS server
This example assumes that the RADIUS server runs on IMC PLAT 5.0 (E0101), IMC UAM 5.0 (E0101), and
IMC CAMS 5.0 (E0101).
Add the switch to IMC as an access device:
1.
Log in to IMC, click the Service tab, and select User Access Manager > Access Device from the
a.
navigation tree.
Click Add.
b.
Configure the following parameters:
c.
Set the shared key for secure authentication and accounting communication to expert.
Specify the ports for authentication and accounting as 1812 and 1813, respectively.
Select LAN Access Service as the service type.
Select H3C as the access device type.
Select the switch from the device list or manually add the switch whose IP address is 10.1.1.2.
Leave the default settings in other fields.
Click OK.
d.
NOTE:
The IP address of the access device specified here must be the same as the source IP address of the RADIUS
packets sent from the switch, which is the IP address of the outbound interface by default, or otherwise the
IP address specified with the nas-ip or radius nas-ip command on the switch.
Figure 15. Make sure the host can get a new IP address
54