H3C Technologies H3C WX3000E Series Wireless Switches - Manual (Page 325)

312
Figure 294 Configure the AAA accounting method for the ISP domain
ACL assignment configuration example
Network requirements
As shown in Figure 295 , the switch and the RADIUS authentication servers (CAMS/iMC servers) work
together to authenticate the host that is to access the Internet. An FTP server is on the Internet, and its IP
address is 10.0.0.1.
• Configure the authentication server to assign ACL 3000.
• Enable 802.1X for port GigabitEthernet 1/0/1 and configure ACL 3000 on the switch.
After a user passes authentication, the authentication server assigns ACL 3000. At this time, ACL 3000
takes effect on GigabitEthernet 1/0/1, allowing the host to access the Internet but not the FTP server.
Figure 295 Network diagram
Configuring the IP addresses of the interfaces
Details are not shown.
Configuring the RADIUS scheme system
1. From the navigation tree, select Authentication > RADIUS.