3Com 5500, 4210 # Specify the server type as extended, # Enable guest Vlan on the port, # Enabled

172CHAPTER 18: AAA CONFIGURATION GUIDE

Product series	Software version	Hardware version
Switch 4210	Release V03.01.00	All versions

Configuration Procedure # Create a RADIUS scheme named cams and specify the primary and secondary servers.

<3Com> system-view

[3Com] radius scheme cams

[3Com-radius-cams] primary authentication 192.168.1.19

[3Com-radius-cams] primary accounting 192.168.1.19

[3Com-radius-cams] secondary authentication 192.168.1.20

[3Com-radius-cams] secondary accounting 192.168.1.20

#Set the shared key for message exchange with the authentication and accounting RADIUS servers to expert.

[3Com-radius-cams] key authentication expert

[3Com-radius-cams] key accounting expert

# Configure the switch to send a username with the domain name.

[3Com-radius-cams] user-name-format with-domain

# Specify the server type as extended.

[3Com-radius-cams] server-type extended

#Create an ISP domain named abc, bind RADIUS scheme cams for authentication, and configure dynamic VLAN assignment.

[3Com] domain abc [3Com-isp-abc] radius-scheme cams

[3Com-isp-abc] vlan-assignment-mode integer

[3Com-isp-abc] quit

# Configure the ISP domain abc as the default ISP domain.

[3Com] domain default enable abc

# Enable guest VLAN on the port.

[3Com] interface Ethernet 1/0/3

[3Com-Ethernet1/0/3] dot1x port-method portbased

[3Com-Ehternet1/0/3] dot1x guest-vlan 10

# Enabled 802.1x.

[3Com] dot1x

# Enable 802.1x in interface view.

[3Com] interface Ethernet 1/0/3 [3Com-Ethernet1/0/3] dot1x

Complete Configuration #

system-view