beautypg.com

Tri-authentication configuration – Allied Telesis AlliedWare Plus Operating System Version 5.4.4C (x310-26FT,x310-26FP,x310-50FT,x310-50FP) User Manual

Page 1115

background image

Authentication Introduction and Configuration

Software Reference for x310 Series Switches

C613-50046-01 REV A

AlliedWare Plus

TM

Operating System - Version 5.4.4C

42.19

Tri-Authentication Configuration

Follow the below three steps to configure tri-authentication across a range of switch
ports:

Step 1:

Define the RADIUS Server:

Define the RADIUS Server where the switch will send authentication requests by
using the below commands:

These commands adds the RADIUS Server address and set parameters to the
RADIUS server. The key parameter specifies the secret key for the server.

Step 2:

Define the default authentication server lists:

Define the default authentication server lists for 802.1X authentication, Web-
authentication, and MAC-authentication:

awplus#

configure terminal

awplus(config)#

radius-server host <ip-address> key
<key-string>

Note

The RADIUS Server, where the switch sends authentication requests, can be the
switch’s own Local RADIUS Server. For information on how to configure Local
RADIUS Server see

Chapter 50, Local RADIUS Server Introduction and

Configuration

.

awplus#

configure terminal

awplus(config)#

aaa authentication dot1x default group radius

awplus(config)#

aaa authentication auth-web default group
radius

awplus(config)#

aaa authentication auth-mac default group
radius