3Com 8807 Configuration Manual page 272

272 C 27: P
HAPTER ORTAL
n
C
ONFIGURATION
Network diagram
Figure 66 Network diagram for Portal Direct authentication method
Ethernet2/1/3 Ethernet2/1/3 Ethernet2/1/3
Vlan -interface 3 Vlan -interface 3 Vlan -interface 3
172.21.1.1/16 172.21.1.1/16 172.21.1.1/16
User PC User PC User PC
172.21.1.2/16 172.21.1.2/16 172.21.1.2/16
Gateway address: 172.21.1.1 Gateway address: 172.21.1.1 Gateway address: 172.21.1.1
Configuration procedure
Only the configurations on switches are listed below. Configurations on the Portal
servers and RADIUS authentication/accounting servers are not described here.
1 Configure the RADIUS scheme
# Create a RADIUS scheme named portal
[SW8800] radius scheme portal
# Set the server type of this RADIUS scheme as Portal
[3Com-radius-portal] server-type portal
# Set the primary authentication and accounting servers of this RADIUS scheme
and their communication keys
[3Com-radius-portal] primary authentication 192.168.1.100
[3Com-radius-portal] primary accounting 192.168.1.100
[3Com-radius-portal] key accounting hello
[3Com-radius-portal] key authentication hello
[3Com-radius-portal] user-name-format without-domain
[3Com-radius-portal] quit
2 Configure ISP domain
# Create an ISP domain named portal
[SW8800] domain portal
# This ISP domain uses the RADIUS scheme named portal
[3Com-isp-portal] radius-scheme portal
[3Com-isp-portal] quit
# Set portal as the default ISP domain of the system (optional)
[SW8800] domain default enable portal
Internet Internet Internet Internet Internet
vlan -interface 2 vlan -interface 2 vlan -interface 2
192.168.1.160/16 192.168.1.160/16 192.168.1.160/16
Ethernet2/1/10 Ethernet2/1/10 Ethernet2/1/10 Ethernet2/1/10 Ethernet2/1/10
Ethernet2/1/1 Ethernet2/1/1 Ethernet2/1/1
VL AN 2 VL AN 2 VL AN 2 VL AN 2 VL AN 2 VL AN 2
Ethernet2/1/2 Ethernet2/1/2 Ethernet2/1/2
Switch Switch Switch
Portal server Portal server Portal server
192.168.1.200/16 192.168.1.200/16 192.168.1.200/16
RADIUS authentication/accounting server RADIUS authentication/accounting server RADIUS authentication/accounting server
192.168.1.100/16 192.168.1.100/16 192.168.1.100/16