Fujitsu PRIMERGY BX900 User Manual page 48

<Configuration target>
Use MAC address authentication in interface0/1-0/3.
Authentication database of Interface0/1-0/3 is following
-Interface0/1、0/2
-Interface0/3
AAA Group ID
-Interface0/1、0/2
-Interface0/3
Authenticated per Supplicant MAC address
Available users in interface 0/3 are following.
MAC address
00:11:11:00:00:01
00:22:22:00:00:02
RADIUS Server IP Address:
RADIUS Server is connected to VLAN13.
RADIUS Server secret :radius-secret
Authentication Protocol: MD5-CHAP
Note
Configure the following attributes in RADISU server in order to assign VLAN ID to users.
Please see user guide of RADIUS server for how to configure.
name
Tunnel-Type
Tunnel-Media-Type
Tunnel-Private-Group-ID
When multiple tunnel attributes are configured by tag, the least available value is assigned to users as
VLAN information.
<Commands>
Enable MAC address authentication
(config)#macauth use on
Configure password for MAC address authentication
(config)#macauth password macauth-pass
Configure authentication protocol to MD5-CHAP
(config)#macauth type chap_md5
Configure port which RADIUS server is connected to
(config)#interface 0/26
(config-if)#vlan untag 13
Configure VLAN for RADIUS server
(config)#lan 0 vlan 13
(config)#lan 0 ip address 172.16.1.101/16 3
Configure VLAN which supplicants authenticated by IEEE802.1X are connected to
(config)#interface 0/19
(config-if)#vlan untag 10
(config)#interface 0/20
(config-if)#vlan untag 11
(config)#interface 0/21
(config-if)#vlan untag 100
: RADIUS Server
: Authentication information set locally
:0
:1
172.16.1.100
number
64
65
81
47 / 95
PRIMERGY 10GbE Connection Blade 18/8 User Guide
Assigned VLAN ID
VLAN123
VLAN100
Attribute value
VLAN (13)
802 (6)
VLAN ID (coded by ASCII code)