3Com Switch 7750 Configuration Guide

EAD Configuration Example 545
EAD Configuration
Example
Network requirements
In Figure 138:
■ A user is connected to Ethernet2/0/1 of the switch
■ The user adopts 802.1X client supporting EAD extended function
■ By configuring the switch, user remote authentication is implemented through
RADIUS server and EAD control is achieved through security policy server.
The following are the configuration tasks:
■ Connect the RADIUS authentication server to the switch. The IP address of the
server is 10.110.91.164, and the switch adopts the port with port number
1812 to communicate with the authentication server.
■ Configure the authentication server type to extended.
■ Configure the encryption password for exchanging messages between the
switch and RADIUS server to “expert”.
■ Configure the IP address of the security policy server to 10.110.91.166.
Enter RADIUS scheme view radius scheme
radius-scheme-name
-
Configure the RADIUS
server type to extended
server-type extended Optional
By default, for a new RADIUS
scheme, the server type is
standard; The type of
RADIUS server in the default
RADIUS scheme “system” is
extended.
Configure the IP address for
the security policy server
security-policy-server
ip-address
Optional
This configuration is optional
if the security policy server
and RADIUS server run on
the same machine;
otherwise, it is required.
Table 428 EAD configuration
Operation Command Description