Network Login - 3Com SuperStack 4 Configuration Manual

information about the local domain can be seen by typing "display domain". For
example:
<SW5500>display domain
0 Domain = default system
State = Active
Scheme = LOCAL Access-limit = Disable
Domain User Template:
Idle-cut = Disable
Self-service = Disable
Messenger Time = Disable
Default Domain Name: default system
Total 1 domain(s).1 listed.
This default system domain uses the LOCAL scheme.
It is not recommended that you change the default system domain, as it could
result in locking all users out of the switch. This could happen if you change the
default local scheme to use an external RADIUS server, which is unavailable.
1 A new RADIUS scheme should be created as follows:
[SW5500]radius scheme NewSchemeName
New Radius scheme
[SW5500-radius-NewSchemeName]
2 Next, we need to add the attributes of the RADIUS scheme. This involves
configuring the RADIUS server IP address and shared secret.
[SW5500-radius-NewSchemeName]key authentication mysharedsecret
[SW5500-radius-NewSchemeName]primary authentication 161.71.67.250
3 The RADIUS scheme will not become active unless an accounting server is also
defined. If you don't have an accounting server, then the RADIUS scheme needs to
have accounting set to "optional".
[SW5500-radius-NewSchemeName]accounting optional
4 Next, create a new domain as follows:
[SW5500]domain Demo
New Domain added.
[SW5500-isp-Demo]
5 Change the domain to use the new RADIUS scheme that you have configured:
[SW5500-isp-demo]radius-scheme NewSchemeName
And that completes the configuration of the new radius server and associating it
with a domain.

Network Login

Network login must first be enabled globally by issuing the command dot1x:
[5500-xx]dot1x
802.1x is enabled globally
(where is either EI or SI)
xx
AAA and RADIUS Protocol Configuration 291