CANOGA PERKINS 9171 Configuration Guide - Manual (Page 258)

CanogaOS Configuration Guide
40-2
For Centec Switch
Step 1: login into the Centec Switch system and enter into configuration mode
DUT1#configure terminal
DUT1(config)#
Step 2: configuration enable aaa
DUT1(config)#aaa new-model
DUT1(config)#
Step 2: configuration authentication login method list. “radius-login” is the login method
list name.
DUT1(config) # aaa authentication login radius-login radius local line enable
DUT1(config)#
Step 3: configuration RADIUS server parameter.
DUT1(config) # radius-server host 1.1.1.1 key admin
DUT1(config)#
Step 4: configuration interface ip address.
DUT1(config) # interface eth-0-1
DUT1(config -if)# no switchport
DUT1(config -if)# ip address 1.1.1.2/24
DUT1(config -if)# quit
DUT1(config )#
Step 5: enter line configuration mode
DUT1(config)#line vty 0 7
DUT1(config-line)#
Step 6: configuration line authentication.
DUT1(config-line)#login authentication radius-login
DUT1(config-line)#
Notes:
Make sure Linux Box and Centec Switch can ping each other.
Pay attention to login authentication queue. In this sample, if RADIUS returns an error,
the user is authenticated using the local database.
For more information about the configuration of RADIUS authentication, please
reference CanogaOS Command Reference.
40.4 Checking Configuration
Step 1: make sure all cables of the network are linked well.
Step 2: make sure Linux Box and Centec Switch can ping each other.
Step 3: make sure the RADIUS authentication function being enabled. You can use
command show authentication status in 917x switch.
DUT1#show aaa status
aaa stats:
Authentication enable
DUT1#