Operation Manual – AAAH3C S3100-52P Ethernet switch Chapter 3 EAD Configuration3-3z A user is connected to Ethernet 1/0/1 on the switch.z The user adopts 802.1x client supporting EAD extended function.z You are required to configure the switch to use RADIUS server for remote userauthentication and use security policy server for EAD control on users.The following are the configuration tasks:z Connect the RADIUS authentication server 10.110.91.164 and the switch, andconfigure the switch to use port number 1812 to communicate with the server.z Configure the authentication server type to extended.z Configure the encryption password for exchanging messages between the switchand RADIUS server to expert.z Configure the IP address 10.110.91.166 of the security policy server.II. Network diagramEth1/0/1 InternetUserSecurity policy servers10.110.91.166/16Virus patch servers10.110.91.168/16Authentication servers10.110.91.164/16Figure 3-2 EAD configurationIII. Configuration procedure# Configure 802.1x on the switch. Refer to “Configuring 802.1x” in 802.1x and SystemGuard Configuration.# Configure a domain. system-view[Sysname] domain system[Sysname-isp-system] quit# Configure a RADIUS scheme.[Sysname] radius scheme cams[Sysname-radius-cams] primary authentication 10.110.91.164 1812[Sysname-radius-cams] accounting optional[Sysname-radius-cams] key authentication expert
