H3C S7500 Series Operation Manual page 518

Operation Manual – 802.1x
H3C S7500 Series Ethernet Switches
[H3C-radius-radius1] secondary accounting 10.11.1.1
# Set the password for the switch and the authentication RADIUS servers to exchange
messages.
[H3C -radius-radius1] key authentication name
# Set the password for the switch and the accounting RADIUS servers to exchange
messages.
[H3C-radius-radius1] key accounting money
# Set the interval and the number of retries for the switch to send packets to the
RADIUS servers.
[H3C-radius-radius1] timer 5
[H3C-radius-radius1] retry 5
# Set the interval and the number of retries for the switch to send real-time accounting
packets to the RADIUS servers.
[H3C-radius-radius1] timer realtime-accounting 15
# Configure to send the user name to the RADIUS server with the domain name
removed beforehand.
[H3C-radius-radius1] user-name-format without-domain
[H3C-radius-radius1] quit
# Create a domain named aabbcc.net and enter its view.
[H3C] domain enable aabbcc.net
# Adopt radius1 as the RADIUS scheme of the user domain. If the RADIUS server
does not work, adopt local authentication scheme.
[H3C-isp-aabbcc.net] scheme radius-scheme radius1 local
# Specify the maximum number of users the user domain can accommodate as 30.
[H3C-isp-aabbcc.net] access-limit enable 30
# Enable the idle disconnecting function and set the related parameters.
[H3C-isp-aabbcc.net] idle-cut enable 20 2000
[H3C-isp-aabbcc.net] quit
# Configure aabbcc.net as the default user domain.
[H3C] domain default enable aabbcc.net
# Create a local access user.
[H3C] local-user localuser
[H3C-luser-localuser] service-type lan-access
[H3C-luser-localuser] password simple localpass
1-21
Chapter 1 802.1x Configuration