Operation Manual – 802.1x-System GuardH3C S3100 Series Ethernet Switches Chapter 1 802.1x Configuration1-24III. Configuration procedureNote:Following configuration covers the major AAA/RADIUS configuration commands. Referto AAA Operation Manual for the information about these commands. Configuration onthe client and the RADIUS servers is omitted.# Enable 802.1x globally. system-viewSystem View: return to User View with Ctrl+Z.[Sysname] dot1x# Enable 802.1x on Ethernet 1/0/1 port.[Sysname] dot1x interface Ethernet 1/0/1# Set the access control method to be MAC-address-based (This operation can beomitted, as MAC-address-based is the default).[Sysname] dot1x port-method macbased interface Ethernet 1/0/1# Create a RADIUS scheme named “radius1” and enter RADIUS scheme view.[Sysname] radius scheme radius1# Assign IP addresses to the primary authentication and accounting RADIUS servers.[Sysname-radius-radius1] primary authentication 10.11.1.1[Sysname-radius-radius1] primary accounting 10.11.1.2# Assign IP addresses to the secondary authentication and accounting RADIUS server.[Sysname-radius-radius1] secondary authentication 10.11.1.2[Sysname-radius-radius1] secondary accounting 10.11.1.1# Set the password for the switch and the authentication RADIUS servers to exchangemessages.[Sysname-radius-radius1] key authentication name# Set the password for the switch and the accounting RADIUS servers to exchangemessages.[Sysname-radius-radius1] key accounting money# Set the interval and the number of the retries for the switch to send packets to theRADIUS servers.[Sysname-radius-radius1] timer 5[Sysname-radius-radius1] retry 5
