User's Manual Part 2


64JadeOSUserManual
Toconfigureblack‐listinJadeOS,usethefollowingcommand:
(JadeOS) (config) #netdestination black-list name www.sina.com
(JadeOS) (config) # ip access-list session post
(JadeOS)(config-sess-post) #any alias 123 any deny send-deny-response
position 2
9.8RadiusProxy
JadeOSsupportsradius proxy.WithproxyRADIUS,oneRADIUSserverreceivesan
authentication(oraccounting)requestfromaRADIUSclient(suchasaNAS),for‐
wardstherequesttoaremoteRADIUSserver,receivesthereplyfromtheremote
server,andsendsthatreplytotheclient,possiblywithchangestoreflectlocalad‐
ministrativepolicy.AcommonuseforproxyRADIUSisroaming.Roamingpermits
twoormoreadministrativeentitiestoalloweachother'suserstodialintoeitheren‐
tity'snetworkforservice.
9.8.1ConfiguringRadiusProxy
Step1Createaaaauthenticationradius‐proxyRP
(JadeOS) (config)#aaa authentication radius-proxy RP
(JadeOS) (Radius Proxy Profile "RP")#default-role postauth
(JadeOS) (Radius Proxy Profile "RP")#server-group SG1
Step2ConfigaaaprofileAAA,andspecifytheauthenticationwa yofRadiusProxyis
RP
(JadeOS) (AAA profile "AAA")#authentication-radius-proxy RP
Step3Specifytheaaaprofileinconfigmode
(JadeOS) (AAA profile "AAA")#aaa radius-proxy aaa profile AAA

Step4EnableRadiusproxyinconfigmode
(JadeOS) (AAA profile "AAA")#aaa radius-proxy enable
9.8.2ConfiguringEAP‐SIM
EAP‐SIMisoneoftheEAPauthenticationprotocolbasedon2GSIMcardthrough
whichusersaccesstoWLANnetwork.
Differedfromotherauthenticationprotocol,EAM‐SIMtakesuseoftheuserdataand
originalauthentication messagebestoredinSIMcar dtoauthenticateuserandgen‐
eratesessionkeytoaccessWLAN.Atthesametimethedatawillbestoredinthe 
ISP’sHLRtoavoidtheauthenticationmessagetransferonInternettopreventuser
datafromnetworkattack.
EAP‐SIMistheauthenticationprot ocolappliedin2GnetworksandEAP‐AKAisap‐