Dot1X Trunk Authentication Application - Zte ZXR10 5900 Series User Manual

ZXR10 5900/5200 Series User Manual (Basic Configuration Volume)
138 Confidential and Proprietary Information of ZTE CORPORATION
� Set the encryption password to "aaazte" when the system ex-
changes packets with the authentication RADIUS server. Set
the system to resend packets to the RADIUS server if no re-
sponse comes from this server within five seconds after the
previous sending, and packets can be resent for five times at
most. Direct the system to remove the user domain name from
the user name and then send it to the RADIUS server.
Switch configuration:
ZXR10(config)#radius authentication-group 1
ZXR10(config-authgrp-1)#server 1 10.1.1.1 key aaazte
<auth server port num >
ZXR10(config-authgrp-1)#server 2 10.1.1.2 key aaazte port
<auth server port num >
ZXR10(config-authgrp-1)#exit
ZXR10(config)#radius accounting-group 1
ZXR10(config-acctgrp-1)#server 1 10.1.1.1 key aaazte
<acct server port num >
ZXR10(config-acctgrp-1)#server 2 10.1.1.2 key aaazte port
<acct server port num >
ZXR10(config-acctgrp-1)#exit
ZXR10(config)# nas
ZXR10(config-nas)#dot1x re-authentication enable period 5
ZXR10(config-nas)#dot1x max-request 5
ZXR10(config-nas)#create aaa 1 port gei_1/1
ZXR10(config-nas)#aaa 1 authentication radius
ZXR10(config-nas)#aaa 1 control dot1x enable
ZXR10(config-nas)#aaa 1 authorization auto
ZXR10(config-nas)#aaa 1 accounting enable
ZXR10(config-nas)#aaa 1 multiple-hosts enable
ZXR10(config-nas)#aaa 1 default-isp zte163.net
ZXR10(config-nas)#aaa 1 fullaccount disable
ZXR10(config-nas)#aaa 1 radius-server authentication
ZXR10(config-nas)#aaa 1 radius-server accounting
ZXR10(config-nas)#aaa 1 authen radius
Dot1x Trunk Authentication
Application
Internal network of an enterprise is shown in
F

30 DOT1X TRUNK AUTHENTICATION APPLICATION

IGURE
port
port
1
1
Figure 30.