Filter
Top Products
DES-7200 Configuration Guide Chapter 4 802.1x Configuration
4-25
DISABLE mode: Suitable for the environment with no limits for the users. The user can
access the network once he/she passes the authentication.
DHCP SERVER mode: The user PC gets the IP address via DHCP. The administrator
configures the DHCP RELAY of the device to limit the DHCP SERVER that the users can
access. In this way, only the IPs allocated by the specified DHCP SERVER are legal.
RADIUS SERVER mode: The user PC uses fixed IP. The RADIUS SERVER is configured
with <user-IP> mapping relations that are notified to the device via the
Framed-IP-Address attributes of the device. The user has to use that IP to be able to
access the network.
SUPPLICANT mode: The user PC uses fixed IP. The SUPPLICANT notifies the
information to the device. The user has to use the IP at authentication to be able to
access the network.
Caution
When the user switches modes, it will cause all authenticated users to get
offline. So, it is recommended to configure the authentication mode before the
use.
In the privileged mode, configure the IP authorization mode as follows:
Command Function
configure terminal
Enter the global configuration mode.
aaa new-model
Enable the AAA function
aaa authorization ip-auth-mode {disabled |
dhcp-server | radius-server | supplicant }
Configure the IP authorization mode
end
Return to the privileged mode.
write
Save the configuration.
show running-config
Show the configuration.
The example below configures the IP authorization mode as the RADIUS-SERVER mode:
DES-7200# configure terminal
DES-7200(config)# aaa authorization ip-auth-mode radius-server
DES-7200(config)# end
DES-7200# show running-config
!
aaa new-model
!
aaa authorization ip-auth-mode radius-server
!
DES-7200# write memory
4.2.16 Releasing Advertisement
Our 802.1x allows you to configure the Reply-Message field on the Radius Server. When