PLANET XGS3-24040 - Manual (Page 479)

Chapter 47 802.1x Configuration
47-19
47.3.2 Examples of IPv4 Radius Applications
Figure 2-16 IEEE 802.1x Configuration Example Topology
The PC is connecting to port 1/2 of the switch; IEEE 802.1x authentication is enabled on port1/2; the access
mode is the default MAC-based authentication. The switch IP address is 10.1.1.2. Any port other than port 1/2
is used to connect to RADIUS authentication server, which has an IP address of 10.1.1.3, and use the default
port 1812 for authentication and port 1813 for accounting. IEEE 802.1x authentication client software is
installed on the PC and is used in IEEE 802.1x authentication.
The configuration procedures are listed below:
Switch(config)#interface vlan 1
Switch(Config-if-vlan1)#ip address 10.1.1.2 255.255.255.0
Switch(Config-if-vlan1)#exit
Switch(config)#radius-server authentication host 10.1.1.3
Switch(config)#radius-server accounting host 10.1.1.3
Switch(config)#radius-server key test
Switch(config)#aaa enable
Switch(config)#aaa-accounting enable
Switch(config)#dot1x enable
Switch(config)#interface ethernet 1/2
Switch(Config-If-Ethernet1/2)#dot1x enable
Switch(Config-If-Ethernet1/2)#dot1x port-control auto
Switch(Config-If-Ethernet1/2)#exit
10.1.1.1
10.1.1.2
Radius Server
10.1.1.3