DES-7200 Configuration Guide Chapter 1 AAA Configuration
1-15
Command Function
configure terminal
Enter the global configuration mode.
aaa new-model
Enable AAA.
aaa authentication dot1x {default |
list-name} method1 [method2...]
Define an IEEE802.1x authentication method
list. RADIUS remote authentication and using
the local database are the supported
authentication methods.
dot1x authentication list-name
Apply the method list to 802.1x.
For the detailed configuration method for the IEEE802.1x, see the related chapter in
Configuring 802.1x.
1.3.9 Example of
Authentication
Configuration
The example below illustrates show to configure the network device to use “Radius + local” for
authentication.
DES-7200(config)# aaa new-model
DES-7200(config)# username DES-7200 password starnet
DES-7200(config)# radius-server host 192.168.217.64
DES-7200(config)# aaa authentication login test group radius local
DES-7200(config)# line vty 0
DES-7200(config-line)# login authentication test
DES-7200(config-line)# end
DES-7200# show running-config
!
aaa new-model
!
!
aaa authentication login test group radius local
username DES-7200 password 0 starnet
!
radius-server host 192.168.217.64
!
line con 0
line vty 0
login authentication test
line vty 1 4
!
!
In the example above, the access server uses the Radius server (IP 192.168.217.64) to
perform authentication for the login users. If the Radius server has no reply, the local database
will be used for the identity authentication.