Filter
Top Products
DES-7200 Configuration Guide Chapter 4 802.1x Configuration
4-65
Configure active/standby server group
Configure the control mode of user authentication under the corresponding port as
port-based authentication;
Configure to prohibit dynamic user from moving between ports;
Configure IP authorization mode as radius Server mode.
4.5.4.4 Configuration Steps
Configure access switch "SwitchA":
! Turn on AAA switch
DES-7200(config)#aaa new-model
! Configure RADIUS server
DES-7200(config)#radius-server host 192.168.32.120
DES-7200(config)#radius-server host 192.168.32.121
! Configure RADIUS key
DES-7200(config)#radius-server key DES-7200
! Configure server group (select active server and standby server)
DES-7200(config)#aaa group server radius rj
DES-7200(config-gs-radius)#server 192.168.32.120
DES-7200(config-gs-radius)#server 192.168.32.121
! Configure dot1x authentication list
DES-7200(config)#aaa authentication dot1x hello group radius
! Apply dot1x authentication method list
DES-7200(config)#dot1x authentication hello
! Configure 802.1X accounting method list
DES-7200(config)#aaa accounting network jizhang start-stop group radius
! Apply 802.1X accounting method list
DES-7200(config)#dot1x accounting jizhang
! Configure the port as controlled port (enable port-based authentication)
DES-7200(config)#interface range fastEthernet 0/1-22
DES-7200(config-if-range)#dot1x port-control auto
! Configure the control mode of user authentication under the corresponding port as
port-based authentication
DES-7200(config-if-range)# dot1x port-control-mode port-based
DES-7200(config-if-range)#exit
! Configure to prohibit dynamic user from moving between ports;
DES-7200(config)#dot1x stationarity enable
! Configure IP authorization mode of device as RADIUS Server mode
DES-7200(config)#aaa authorization ip-auth-mode radius-server