Operation Manual – AAAH3C S3100 Series Ethernet Switches Chapter 3 EAD Configuration3-3Table 3-1 EAD configurationOperation Command RemarksEnter system view system-view —Enter RADIUS schemeviewradius schemeradius-scheme-name —Configure the RADIUSserver type to extended server-type extended RequiredConfigure the IP addressof a security policy serversecurity-policy-serverip-addressRequiredEach RADIUS schemesupports up to eight IPaddresses of securitypolicy servers.3.4 EAD Configuration ExampleI. Network requirementsIn Figure 3-2:z A user is connected to Ethernet 1/0/1 on the switch.z The user adopts 802.1x client supporting EAD extended function.z You are required to configure the switch to use RADIUS server for remote userauthentication and use security policy server for EAD control on users.The following are the configuration tasks:z Connect the RADIUS authentication server 10.110.91.164 and the switch, andconfigure the switch to use port number 1812 to communicate with the server.z Configure the authentication server type to extended.z Configure the encryption password for exchanging messages between the switchand RADIUS server to “expert”.z Configure the IP address 10.110.91.166 of the security policy server.
