Configuring 802.1X
191
Networking Diagram
Figure 53
Enabling 802.1X and RADIUS to Perform AAA on the User
Configuration Procedure
The following examples concern most of the AAA/RADIUS configuration
commands. For details, refer to the chapter AAA and RADIUS Protocol
Configuration.
The configurations of accessing user workstation and the RADIUS server are
omitted.
1
Enable the 802.1X performance on the specified port Ethernet 1/0/1.
[4500]
dot1x interface Ethernet 1/0/1
2
Set the access control mode. (This command could not be configured, when it is
configured as MAC-based by default.)
[4500]
dot1x port-method macbased interface Ethernet 1/0/1
3
Create the RADIUS scheme radius1 and enters its view.
[4500]
radius scheme radius1
4
Set IP address of the primary authentication/accounting RADIUS servers.
[4500-radius-radius1]
primary authentication 10.11.1.1
[4500-radius-radius1]
primary accounting 10.11.1.2
5
Set the IP address of the second authentication/accounting RADIUS servers.
[4500-radius-radius1]
secondary authentication 10.11.1.2
[4500-radius-radius1]
secondary accounting 10.11.1.1
6
Set the encryption key when the system exchanges packets with the
authentication RADIUS server.
[4500-radius-radius1]
key authentication name
7
Set the encryption key when the system exchanges packets with the accounting
RADIUS server.
[4500-radius-radius1]
key accounting money
8
Set the timeouts and times for the system to retransmit packets to the RADIUS
server.
Supplicant
Authentication Servers
(RADIUS Server Cluster
IP Address: 10.11.1.1
10.11.1.2)
Internet
Authenticator
Switch
Supplicant
Authentication Servers
(RADIUS Server Cluster
IP Address: 10.11.1.1
10.11.1.2)
Internet
Authenticator
Switch
Supplicant
Authentication Servers
(RADIUS Server Cluster
IP Address: 10.11.1.1
10.11.1.2)
Internet
Authenticator
Switch
E1/0/1
Supplicant
Authentication Servers
(RADIUS Server Cluster
IP Address: 10.11.1.1
10.11.1.2)
Internet
Authenticator
Switch
Supplicant
Authentication Servers
(RADIUS Server Cluster
IP Address: 10.11.1.1
10.11.1.2)
Internet
Authenticator
Switch
User
Summary of Contents for 400 Family
Page 12: ......
Page 16: ...14 ABOUT THIS GUIDE ...
Page 58: ...56 CHAPTER 2 PORT OPERATION ...
Page 68: ...66 CHAPTER 3 VLAN OPERATION ...
Page 98: ...96 CHAPTER 5 NETWORK PROTOCOL OPERATION ...
Page 124: ...122 CHAPTER 6 IP ROUTING PROTOCOL OPERATION ...
Page 156: ...154 CHAPTER 8 ACL CONFIGURATION ...
Page 218: ...216 CHAPTER 11 802 1X CONFIGURATION ...
Page 298: ...296 CHAPTER 13 PASSWORD CONTROL CONFIGURATION OPERATIONS ...
Page 336: ...334 APPENDIX B RADIUS SERVER AND RADIUS CLIENT SETUP ...