DES-7200 Configuration Guide Chapter 1 AAA Configuration
1-14
Command Function
show running-config
Confirm the configuration.
1.3.7 Configuring the AAA
Authentication for PPP User
PPP is a link-layer protocol of carrying the network-layer datagram in the point-to-point link. In
many circumstances, the user accesses to the NAS(Network Access Server) by asynchronous
or ISDN dail. Once the connection has been set up, the PPP negotiation will be enabled. To
prevent the unauthorized access to the network, the identity authentication is required for the
dailed user in the process of PPP negotiation.
This section deals with how to configure the AAA Enable authentication methods supported by
DES-7200 product. To configure the AAA Enable authentication, execute the following
command in the global configuration mode:
Command Function
configure terminal
Enter the global configuration mode.
aaa new-model
Enable AAA.
aaa authentication ppp {default |
list-name} method1 [method2...]
Define a PPP authentication method list.
RADIUS, TACACS+ remote authentication and
using the local database are the supported
authentication methods.
interface interface-type interface-number
Enter the asynchronous or ISDN interface that
needs to apply the AAA authentication.
ppp authentication {chap | pap} {default |
list-name}
Apply the method list on the asynchronous or
ISDN interface.
For the detailed configuration method for the PPP, see the related chapter in Configuring PPP,
MP.
1.3.8 Configuring the AAA
Authentication for 802.1x
User
IEEE802.1x is a standard of Port-Based Network Access Control, providing the point-to-point
secure access for the LAN, and a means of the authentication of the user connecting to the
LAN device.
This section deals with how to configure the 802.1x authentication methods supported by
DES-7200 product. To configure the AAA Enable authentication, execute the following
command in the global configuration mode: