3Com WX4400 3CRWX440095A, WXR100 3CRWXR10095A Shows the results of this combination of methods

AAA Tools for Network Users 445

Figure 31 shows the results of this combination of methods.

Figure 31 Remote Authentication with PEAP Offload using Local Authentication as Backup

5pass fail

RADIUSRADIUS

Server-1Server-2

WX switch

local database

1 2

4

3

Server-group-1

1

set authentication dot1x ssid mycorp *@example.com pass-through server-group-1 local

Authentication proceeds as follows:

1When user Jose@example.com attempts authentication, the WX switch sends an authentication request to the first AAA method, which is server-group-1.

Because server-group-1contains two servers, the first RADIUS server, server-1, is contacted. If this server responds, the authentication proceeds using server-1.

2If server-1fails to respond, the WX retries the authentication using server-2. If server-2responds, the authentication proceeds using server-2.

3If server-2does not respond, because the WX switch has no more servers to try in server-group-1, the WX attempts to authenticate using the next AAA method, which is the local method.

4The WX switch consults its local database for an entry that matches Jose@example.com.

5If a suitable local database entry exists, the authentication proceeds. If not, authentication fails and Jose@example.com is not allowed to access the network.