Configuration; Basic 802.1X Configuration - 3Com 4200G 12-Port Configuration Manual

158 C 21: 802.1
HAPTER
802.1x Configuration
Basic 802.1x

Configuration

Prerequisites
C
X ONFIGURATION
After the maximum number of authentication retries have been made and there
■
are still ports that have not sent any response back, the switch will then add these
ports into the Guest VLAN.
When the maximum number of authentication retries is reached, the switch adds
■
the ports that do not return response packets to Guest VLAN.
Users belonging to the Guest VLAN can access the resources of the Guest VLAN
■
without being authenticated. But they need to be authenticated before accessing
external resources.
Normally, the Guest VLAN function is coupled with the dynamic VLAN delivery
function.
802.1x provides a solution for authenticating users. To implement this solution, you
need to execute 802.1x-related commands. You also need to configure AAA schemes
on switches and to specify the authentication scheme (RADIUS authentication
scheme or local authentication scheme).
Figure 52 802.1x configuration
802.1x users use domain names to associate with the ISP domains configured on
■
switches
Configure the AAA scheme (a local authentication scheme or the RADIUS scheme)
■
to be adopted in the ISP domain.
If you specify to use the RADIUS scheme, that is to say the supplicant systems are
■
authenticated by a remote RADIUS server, you need to configure the related user
names and passwords on the RADIUS server and perform RADIUS client-related
configuration on the switches.
If you specify to adopt a local authentication scheme, you need to configure user
■
names and passwords manually on the switches. Users can pass the authentication
through 802.1x client if they provide the user names and passwords that match
with those stored in the switches.
You can also specify to adopt RADIUS authentication scheme, with a local
■
authentication scheme as a backup. In this case, the local authentication scheme is
adopted when the RADIUS server fails.
Refer to the AAA and RADIUS Operation Manual for detailed information about AAA
configuration.
To utilize 802.1x features, you need to perform basic 802.1x configuration.
Configure ISP domain and its AAA scheme, specify the authentication scheme
■
(RADIUS or a local scheme) .
Ensure that the service type is configured as lan-access (by using the service-type
■
command) for local authentication scheme.
ISP domain ISP domain
802.1x 802.1x
configurati on configurati on
configurati on configurati on
Local Local
authenticati on authenticati on
AAA sc heme AAA sc heme
RADIUS RADIUS
scheme scheme