3Com Switch 7750 Configuration Guide Guide

802.1x Configuration 471
Refer to AAA&RADIUS&RADIUS&HWTACACS&EAD Operation Manual for detailed
information about dynamic VLAN assignment function.
802.1x Configuration 802.1x provides a solution for authenticating users. To implement this solution,
you need to execute 802.1x-related commands. You also need to configure AAA
schemes on switches and to specify the authentication scheme (RADIUS
authentication scheme or local authentication scheme).
Figure 121 802.1x configuration
■ 802.1x users use domain names to associate with the ISP domains configured
on switches
■ Configure the AAA scheme (a local authentication scheme or the RADIUS
scheme) to be adopted in the ISP domain.
■ If you specify to use the RADIUS scheme, that is to say the supplicant systems
are authenticated by a remote RADIUS server, you need to configure the
related user names and passwords on the RADIUS server and perform RADIUS
client-related configuration on the switches.
■ If you specify to adopt a local authentication scheme, you need to configure
user names and passwords manually on the switches. Users can pass the
authentication through 802.1x client if they provide the user names and
passwords that match with those stored in the switches.
■ You can also specify to adopt RADIUS authentication scheme, with a local
authentication scheme as a backup. In this case, the local authentication
scheme is adopted when the RADIUS server fails.
Refer to the AAA&RADIUS&RADIUS&HWTACACS&EAD Operation Manual for
detailed information about AAA configuration.
Basic 802.1x
Configuration
To utilize 802.1x features, you need to perform basic 802.1x configuration.
Prerequisites ■ Configure ISP domain and its AAA scheme, specify the authentication scheme (
RADIUS or a local scheme) .
■ Ensure that the service type is configured as lan-access (by using the
service-type command) for local authentication scheme.
Configuring Basic 802.1x
Functions
ISP domain
config urati on
AAA sc heme
Local
aut he nticati on
RADIUS
scheme
802 .1 x
config urati on
ISP domain
config urati on
AAA sc heme
Local
aut he nticati on
RADIUS
scheme
802 .1 x
config urati on
Table 360 Configure basic 802.1x functions
Operation Command Description
Enter system view system-view -