Table 116 Configuration items
Item | Description | |
| Select the type of the RADIUS server to be configured. Options include primary authentication | |
Server Type | server, primary accounting server, secondary authentication server, and secondary accounting | |
| server. | |
|
| |
| Specify the IPv4 or IPv6 address of the RADIUS server. | |
IP Address | The IP addresses of the primary and secondary servers for a scheme must be different. | |
Otherwise, the configuration fails. | ||
| ||
| RADIUS server addresses in the same scheme must use the same IP version. | |
|
| |
Port | Specify the UDP port of the RADIUS server. | |
|
| |
Key | Specify the shared key for communication with the RADIUS server. | |
Confirm Key | If no shared key is specified, the shared key specified in the common configuration part is used. | |
|
|
Network requirements
As shown in Figure 354, an 802.1X user logs in to the switch from the host. Configure the switch to implement RADIUS authentication and accounting for the 802.1X user. RADIUS accounting records the online duration of the 802.1X user.
Configure RADIUS servers on CAMS or IMC to use the default port for authentication and accounting. The 802.1X user's username and password and the shared key expert are configured for packet exchange with the switch.
On the switch, configure the shared key for packet exchange with the RADIUS server as expert, and configure the system to remove the domain name of a username before sending it to the RADIUS server.
On the switch, enable the Telnet server function, and configure the switch to use AAA for authentication, authorization and accounting of Telnet users.
Figure 354 Network diagram
Configuration prerequisites
Enable 802.1X globally and on the specified port. Configure network access control based on MAC addresses. (Details not shown.)
Configuring a RADIUS scheme
1.Select Authentication > RADIUS from the navigation tree.
2.Click Add to add a RADIUS scheme:
a.Enter system as the scheme name.
b.Select Extended as the server type.
374