Filter
Top Products
DES-7200 Configuration Guide Chapter 4 802.1x Configuration
4-23
Caution
1. The agreed accounting key must be the same as that of the Radius
Server and authentication.
2. The accounting function cannot be enabled unless the AAA is enabled.
3. The accounting is impossible unless the 802.1X authentication passes.
4. By default, the accounting function of the 802.1x is disabled.
5. For the database format of accounting, see the related Radius Server
documentation.
Also, the account update is supported. After the account update interval is set on the NAS
device, the NAS device will send account update packets to the Radius Server at periodical
intervals. On the Radius Server, you can define the number of periods before which the
account update packet of a user is not received from the NAS device, the NAS or user will be
regarded as off-line. Then, the Radius Server can stop the accounting of the user, and delete
the user from the on-line user table.
In the privileged mode, you can set the account update function by performing the following
steps:
Command Function
configure terminal
Enter the global configuration mode.
aaa new-model
Enable the AAA function
aaa accounting update
Set the account update function.
end
Return to the privileged mode.
write
Save the configuration.
show running-config
Show the configuration.
You can disable the account update service by using the no aaa accounting update
command.
DES-7200# configure terminal
DES-7200(config)# aaa accounting update
DES-7200(config)# end
DES-7200# write memory
DES-7200# show running-config
The following chapters introduce the propriety features of DES-7200’s network products:
To make it easy for broadband operators and to accommodate use in special environments,
our 802.1x has been expanded on the basis of the account (such expansion is completely
based on the standard, and has totally compatible with IEEE 802.1x).
4.2.15 Configuring the IP
authorization mode
The 802.1x implemented by DES-7200 can force the authenticated users to use fixed IP. By
configuring the IP authorization mode, the administrator can limit the way the user gets IP
address. There are four IP authorization modes: DISABLE, DHCP SERVER, RADIUS