3Com 10014298 manual Implementing, AAA and Radius, Protocols, Network security management

Implementing the AAA and RADIUS Protocols 215

[SW7750-radius-radius1]primary authentication 10.11.1.1

[SW7750-radius-radius1]primary accounting 10.11.1.2

5Set the IP address of the second authentication/accounting RADIUS servers.

[SW7750-radius-radius1]secondary authentication 10.11.1.2

[SW7750-radius-radius1]secondary accounting 10.11.1.1

6Set the encryption key when the system exchanges packets with the authentication RADIUS server.

[SW7750-radius-radius1]key authentication name

7Set the encryption key when the system exchanges packets with the accounting RADIUS server.

[SW7750-radius-radius1]key accounting money

8Set the timeouts and times for the system to retransmit packets to the RADIUS server.

[SW7750-radius-radius1]timer 5

[SW7750-radius-radius1]retry 5

9Set the interval for the system to transmit real-time accounting packets to the RADIUS server.

[SW7750-radius-radius1]timer realtime-accounting 15

10Configure the system to transmit the user name to the RADIUS server after removing the domain name.

[SW7750-radius-radius1]user-name-format without-domain

[SW7750-radius-radius1]quit

11Create the user domain 3com163.net and enters isp configuration mode.

[SW7750]domain 3com163.net

12Specify radius1 as the RADIUS server group for the users in the domain 3com163.net.

[SW7750-isp-3com163.net]radius-scheme radius1

13Set a limit of 30 users to the domain 3com163.net.

[SW7750-isp-3com163.net]access-limit enable 30

14Enable idle cut function for the user and set the idle cut parameter in the domain 3com163.net.

[SW7750-isp-3com163.net]idle-cut enable 50 5000

15Add a local supplicant and set its parameter.

[SW7750]local-user localuser

[SW7750-luser-localuser]attribute service-type lan-access

[SW7750-luser-localuser]password simple localpass

16Enable the 802.1x globally.

[SW7750]dot1x

Implementing the	The Authentication, Authorization, and Accounting (AAA) protocol provides a
AAA and RADIUS	uniform framework for configuring these three security functions and implements
Protocols	network security management.