3Com WX3000 operation manual Basic 802.1x Configuration, Configuring Basic 802.1x Functions, Dot1x

Figure 1-11802.1x configuration

802802.1x.1x	ISPdomain
	configuration
configuration

Local authenticationn

AAA scheme

RADIUS scheme

z z

z

z

z

z

An 802.1x user uses the domain name to associate with the ISP domain configured on the device. Configure the AAA scheme (a local authentication scheme, a RADIUS scheme or a HWTACACS scheme) to be adopted in the ISP domain.

If you specify to use a local authentication scheme, you need to configure the user names and passwords manually on the device. Users can pass the authentication through iNode client if they provide user names and passwords that match those configured on the device.

If you specify to adopt the RADIUS scheme, users are authenticated by a remote RADIUS server. In this case, you need to configure user names and passwords on the RADIUS server and perform RADIUS client-related configuration on the device.

If you specify to adopt the HWTACACS scheme, users are authenticated by a remote TACACS server. In this case, you need to configure user names and passwords on the TACACS server and perform HWTACACS client-related configuration on the device.

You can also specify to adopt the RADIUS or HWTACACS authentication scheme, with a local authentication scheme as a backup. In this case, the local authentication scheme is adopted when the RADIUS server or the TACACS server fails.

Refer to the AAA Operation Manual for detailed information about AAA scheme configuration.

Basic 802.1x Configuration

Configuration Prerequisites

z

z

Configure ISP domain and the AAA scheme to be adopted. You can specify a RADIUS scheme, a HWTACACS scheme, or a local scheme.

Ensure that the service type is configured as lan-access(by using the service-typecommand) if local authentication scheme is adopted.

Configuring Basic 802.1x Functions

Follow these steps to configure basic 802.1x functions:

To do…	Use the command…	Remarks
Enter system view	system-view	—
		Required
Enable 802.1x globally	dot1x	By default, 802.1x is
		disabled globally.

1-12