3Com Switch 8800 Advanced Software V5 Configuration Guide

802.1x Configuration Example 931
[Sysname-radius-radius1] key accounting money
# Set the interval for the switch to retransmit packets to the RADIUS server and
the maximum number of transmission attempts.
[Sysname-radius-radius1] timer response-timeout 5
[Sysname-radius-radius1] retry 5
# Set the interval for the switch to send real time accounting packets to the
RADIUS server.
[Sysname-radius-radius1] timer realtime-accounting 15
# Specify the switch to remove the domain name of any username before passing
the username to the RADIUS server.
[Sysname-radius-radius1] user-name-format without-domain
[Sysname-radius-radius1] quit
# Create default user domain aabbcc.net and enter its view.
[Sysname] domain aabbcc.net
[Sysname-isp-aabbcc.net] quit
[Sysname] domain default enable aabbcc.net
[Sysname] domain aabbcc.net
# Set radius1 as the RADIUS scheme for users of the domain and specify to use
local authentication as the secondary scheme.
[Sysname-isp-aabbcc.net] authentication lan-access radius-scheme radius1 local
[Sysname-isp-aabbcc.net] authorization lan-access radius-scheme radius1 local
[Sysname-isp-aabbcc.net] accounting lan-access radius-scheme radius1 local
# Set the maximum number of users for the domain as 30.
[Sysname-isp-aabbcc.net] access-limit enable 30
# Enable the idle cut function and set the idle cut interval.
[Sysname-isp-aabbcc.net] idle-cut enable 20
[Sysname-isp-aabbcc.net] quit
# Enable 802.1x globally.
[Sysname] dot1x
# Enable 802.1x for port Ethernet 3/1/1.
[Sysname] interface ethernet 3/1/1
[Sysname-Ethernet3/1/1] dot1x
[Sysname-Ethernet3/1/1] quit
# Set the port access control method. (Optional. The default answers the
requirement.)
[Sysname] dot1x port-method macbased interface ethernet 3/1/1