3Com Switch 7750 Configuration Guide Guide

AAA & RADIUS & HWTACACS Configuration Example 517
■ Set the shared key it uses to exchange packets with the switch to "expert".
■ Set the port number for authentication.
■ Add Telnet user names and login passwords.
The Telnet user name added to the RADIUS server must be in the format of
userid@isp-name if you have configure the switch to include domain names in the
user names to be sent to the RADIUS server.
Network diagram
Figure 130 Remote RADIUS authentication of Telnet users
Configuration procedure
# Enter system view.
<SW7750> system-view
[SW7750]
# Adopt AAA authentication for Telnet users.
[SW7750] user-interface vty 0 4
[SW7750-ui-vty0-4] authentication-mode scheme
# Configure an ISP domain.
[SW7750] domain cams
[SW7750-isp-cams] access-limit enable 10
[SW7750-isp-cams] quit
# Configure a RADIUS scheme.
[SW7750] radius scheme cams
[SW7750-radius-cams] accounting optional
[SW7750-radius-cams] primary authentication 10.110.91.164 1812
[SW7750-radius-cams] key authentication expert
[SW7750-radius-cams] server-type 3Com
[SW7750-radius-cams] user-name-format with-domain
[SW7750-radius-cams] quit
# Associate the ISP domain with the RADIUS scheme.
Authentication Server
IP address: 10.110.91.164
Internet
Sw itc h
Telnet user
Inter net
Authentication Server
IP address: 10.110.91.164
Internet
Sw itc h
Authentication server
IP address: 10.110.91.164
Internet
Sw itc h
Telnet user
Inter net
Authentication Server
IP address: 10.110.91.164
Internet
Sw itc h
Authentication Server
IP address: 10.110.91.164
Internet
Sw itc h
Telnet user
Inter net
Authentication Server
IP address: 10.110.91.164
Internet
Sw itc h
Authentication server
IP address: 10.110.91.164
Internet
Sw itc h
Telnet user
Inter net