R3303-HP HSR6800 Routers Security Configuration Guide

101
Figure 38 Network diagram
Configuration procedure
The following configuration procedure covers most AAA/RADIUS configuration commands on the Router.
The configuration on the 802.1X client and RADIUS server are not shown. For more information about
AAA/RADIUS configuration commands, see Security Command Reference.
1. Make sure the 802.1X client can update its IP address after the access port is assigned to the guest
VLAN or a server-assigned VLAN. (Details not shown.)
2. Configure the RADIUS server to provide authentication, authorization, and accounting services.
Configure user accounts and server-assigned VLAN, VLAN 5 in this example. (Details not shown.)
3. Create VLANs, and assign ports to the VLANs:
<Router> system-view
[Router] vlan 1
[Router-vlan1] port gigabitethernet 3/0/2
[Router-vlan1] quit
[Router] vlan 10
[Router-vlan10] port gigabitethernet 3/0/1
[Router-vlan10] quit
[Router] vlan 2
[Router-vlan2] port gigabitethernet 3/0/4
[Router-vlan2] quit
[Router] vlan 5
[Router-vlan5] port gigabitethernet 3/0/3
[Router-vlan5] quit