1-25Network diagramFigure 1-9 Network diagram for configuring port security modemacAddressElseUserLoginSecureExtInternetSwitchHostGE1/0/1Authentication servers(192.168.1.2/24192.168.1.3/24)Configuration procedurez The following configurations involve some AAA/RADIUS configuration commands. Fordetails about the commands, refer to AAA Operation.z Configurations on the user host and the RADIUS server are omitted.z Configure RADIUS parameters# Create a RADIUS scheme named radius1. system-view[Switch] radius scheme radius1# Specify the primary RADIUS authentication server and primary RADIUS accountingserver.[Switch-radius-radius1] primary authentication 192.168.1.3[Switch-radius-radius1] primary accounting 192.168.1.2# Specify the secondary RADIUS authentication server and secondary RADIUS accountingserver.[Switch-radius-radius1] secondary authentication 192.168.1.2[Switch-radius-radius1] secondary accounting 192.168.1.3# Set the shared key for message exchange between the switch and the RADIUSauthentication servers to name.[Switch-radius-radius1] key authentication name# Set the shared key for message exchange between the switch and the accountingRADIUS servers to name.[Switch-radius-radius1] key accounting name# Set the interval and the number of packet transmission attempts for the switch to sendpackets to the RADIUS server.[Switch-radius-radius1] timer 5[Switch-radius-radius1] retry 5
