Using Remote Radius Server - Fujitsu PRIMERGY BX900 Configuration Manual

15.2

Using Remote RADIUS Server

This section describes how to configure IEEE 802.1X authentication by using remote RADIUS
server.
Beginning in privileged EXEC mode, follow these steps to configure IEEE 802.1X
authentication:
Command
Step 1 configure
Step 2 radius-server host auth
ip-addr/hostname
Step 3 radius-server key auth
ip-addr/hostnam <0/7> key-value
Step 4 authentication login list-name radius
Step 5 dot1x system-auth-control
Step 6 dot1x default-login list-name
Step 7 exit
Step 8 show authentication
Step 9 show radius
To assign a remote radius server for IEEE 802.1X, use radius-server host auth
ip-addr/hostname. To create an authentication list for radius, use authentication login
list-name radius. To assign an authentication list for IEEE 802.1X non-configured users,
use dot1x default-login list-name.
In this example, a radius server 192.168.3.1 will be assigned to authenticate IEEE 802.1X
with share key secret.
(BX900-CB1)(Config)#radius-server host auth 192.168.3.1
(BX900-CB1)(Config)#radius-server key auth 192.168.3.1 0 secret
(BX900-CB1)(Config)#authentication login test-list radius
(BX900-CB1)(Config)#dot1x system-auth-control
(BX900-CB1)(Config)#dot1x default-login test-list
(BX900-CB1)(Config)#dot1x port-control all auto
(BX900-CB1)(Config)#exit
(BX900-CB1)#show authentication
Authentication Login List Method 1 Method 2
-------------------------
defaultList
-------- --------
local undefined
2011 Fujitsu Technology Solutions
©
Purpose
Enter global configuration mode
Create a radius server for IEEE 802.1X
authentication
Give s radius share key to a radius
server
Create a authentication list for radius
Enable IEEE 802.1X authentication
support on the switch
Assign an authentication list to IEEE
802.1X default login for non-configured
users
Return to global configuration mode.
Verify the configuration.
Verify the configuration.
Method 3
--------
undefined
56