beautypg.com

H3C Technologies H3C WX3000E Series Wireless Switches User Manual

Page 101

background image

87

Figure 45 Adding an access user account

3.

Configure the AC

Configure a RADIUS scheme

# Create a RADIUS scheme named rad and enter its view.

system-view

[AC] radius scheme rad

# Set the server type for the RADIUS scheme. When using IMC, set the server type to extended.

[AC-radius-rad] server-type extended

# Specify the primary authentication server and primary accounting server and the service port numbers,
and configure the keys used for communication with the servers.

[AC-radius-rad] primary authentication 10.1.1.1 1812

[AC-radius-rad] primary accounting 10.1.1.1 1813

[AC-radius-rad] key authentication expert

[AC-radius-rad] key accounting expert

# Specify the scheme to include the domain names in usernames to be sent to the RADIUS server.

[AC-radius-rad] user-name-format with-domain

[AC-radius-rad] quit

Configure an authentication domain

# Create an ISP domain named bbb and enter its view.

[AC] domain bbb

# Configure the ISP domain to use RADIUS scheme rad.

[AC-isp-bbb] authentication lan-access radius-scheme rad

[AC-isp-bbb] authorization lan-access radius-scheme rad

[AC-isp-bbb] accounting lan-access radius-scheme rad

[AC-isp-bbb] quit

Configure 802.1X authentication

# Enable port security globally.