Creating A Radius Scheme; Configuring Radius Authentication/Authorization Servers - 3Com 5500-EI PWR Install Manual

Hide thumbs Also See for 5500-EI PWR:
Table of Contents

Advertisement

creating a new RADIUS scheme, you should configure the IP address and UDP port number of each
RADIUS server you want to use in this scheme. These RADIUS servers fall into two types:
authentication/authorization, and accounting. And for each type of server, you can configure two
servers in a RADIUS scheme: primary server and secondary server. A RADIUS scheme has some
parameters such as IP addresses of the primary and secondary servers, shared keys, and types of the
RADIUS servers.
In an actual network environment, you can configure the above parameters as required. But you should
configure at least one authentication/authorization server and one accounting server, and you should
keep the RADIUS server port settings on the switch consistent with those on the RADIUS servers.
Actually, the RADIUS service configuration only defines the parameters for information exchange
between switch and RADIUS server. To make these parameters take effect, you must reference the
RADIUS scheme configured with these parameters in an ISP domain view (refer to

Creating a RADIUS Scheme

The RADIUS protocol configuration is performed on a RADIUS scheme basis. You should first create a
RADIUS scheme and enter its view before performing other RADIUS protocol configurations.
Follow these steps to create a RADIUS scheme:
To do...
Enter system view
Enable RADIUS
authentication port
Create a RADIUS
scheme and enter its
view
A RADIUS scheme can be referenced by multiple ISP domains simultaneously.

Configuring RADIUS Authentication/Authorization Servers

Follow these steps to configure RADIUS authentication/authorization servers:
To do...
Enter system view
Use the command...
system-view
radius client enable
radius scheme
radius-scheme-name
Use the command...
system-view
2-11
AAA
Remarks
Optional
By default, RADIUS authentication port
is enabled.
Required
By default, a RADIUS scheme named
"system" has already been created in
the system.
Remarks
Configuration).

Advertisement

Table of Contents
loading

This manual is also suitable for:

5500-ei series

Table of Contents