802.1X Configuration; Basic 802.1X Configuration - 3Com 7757 Configuration Manual

802.1x Configuration

Basic 802.1x
Configuration
Prerequisites
Configuring Basic 802.1x
Functions
802.1x provides a solution for authenticating users. To implement this solution,
you need to execute 802.1x-related commands. You also need to configure AAA
schemes on switches and to specify the authentication scheme (RADIUS
authentication scheme or local authentication scheme).
Figure 97 802.1x configuration
802.1x 802.1x
configuration configuration
802.1x users use domain names to associate with the ISP domains configured
■
on switches
Configure the AAA scheme (a local authentication scheme or the RADIUS
■
scheme) to be adopted in the ISP domain.
If you specify to use the RADIUS scheme, that is to say the supplicant systems
■
are authenticated by a remote RADIUS server, you need to configure the
related user names and passwords on the RADIUS server and perform RADIUS
client-related configuration on the switches.
If you specify to adopt a local authentication scheme, you need to configure
■
user names and passwords manually on the switches. Users can pass the
authentication through 802.1x client if they provide the user names and
passwords that match with those stored in the switches.
You can also specify to adopt RADIUS authentication scheme, with a local
■
authentication scheme as a backup. In this case, the local authentication
scheme is adopted when the RADIUS server fails.
Refer to "AAA Configuration" on page 518 for detailed information about AAA
configuration.
To utilize 802.1x features, you need to perform basic 802.1x configuration.
Configure ISP domain and its AAA scheme, specify the authentication scheme
■
(RADIUS or a local scheme).
Ensure that the service type is configured as lan-access (by using the
■
service-type command) for local authentication scheme.
Table 318 Configure basic 802.1x functions
Operation Command
Enter system view system-view
Enable 802.1x dot1x
globally
ISP domain ISP domain
AAA scheme AAA scheme
configuration configuration
802.1x Configuration
Local Local
authentication
authentication
RADIUS RADIUS
scheme scheme
Description
-
Required
By default, 802.1x is disabled
globally.
399