1744 CHAPTER 92: 802.1X CONFIGURATION802.1x ConfigurationExampleNetwork requirements■ The access control method of macbased is required on the port to controlsupplicants.■ All supplicants belong to default domain aabbcc.net, which can accommodateup to 30 users. RADIUS authentication is performed at first, and then localauthentication when no response from the RADIUS server is received. If theRADIUS accounting fails, the authenticator gets users offline.■ A server group with two RADIUS servers is connected to the router. The IPaddresses of the servers are 10.1.1.1 and 10.1.1.2 respectively. Use the formeras the primary authentication/secondary accounting server, and the latter asthe secondary authentication/primary accounting server.■ Set the shared key for the router to exchange packets with the authenticationserver as name, and that for the router to exchange packets with theaccounting server as money.■ Specify the router to try up to five times at an interval of 5 seconds intransmitting a packet to the RADIUS server until it receives a response from theserver, and to send real time accounting packets to the accounting server every15 minutes.■ Specify the router to remove the domain name from the username beforepassing the username to the RADIUS server.■ Set the username of the 802.1x user as localuser and the password as localpassand specify to use clear text mode. Enable the idle cut function to get the useroffline whenever the user remains idle for over 20 minutes.Network diagramFigure 507 Network diagram for 802.1x configurationConfiguration proceduren The following configuration procedure covers most AAA/RADIUS configurationcommands for the authenticator, while configuration on the supplicant andRADIUS server are omitted. For information about AAA/RADIUS configurationcommands, refer to “AAA/RADIUS/HWTACACS Configuration” on page 1751.# Configure the IP addresses for each interface. (Omitted)InternetRouterAuthenticatorSupplicantEth 1 /11.1 .1. 1/ 24Authentication servers(RADIUS server cluster )10.1.1.110.1.1.2
