802.1x Configuration 399802.1x Configuration 802.1x provides a solution for authenticating users. To implement this solution,you need to execute 802.1x-related commands. You also need to configure AAAschemes on switches and to specify the authentication scheme (RADIUSauthentication scheme or local authentication scheme).Figure 97 802.1x configuration■ 802.1x users use domain names to associate with the ISP domains configuredon switches■ Configure the AAA scheme (a local authentication scheme or the RADIUSscheme) to be adopted in the ISP domain.■ If you specify to use the RADIUS scheme, that is to say the supplicant systemsare authenticated by a remote RADIUS server, you need to configure therelated user names and passwords on the RADIUS server and perform RADIUSclient-related configuration on the switches.■ If you specify to adopt a local authentication scheme, you need to configureuser names and passwords manually on the switches. Users can pass theauthentication through 802.1x client if they provide the user names andpasswords that match with those stored in the switches.■ You can also specify to adopt RADIUS authentication scheme, with a localauthentication scheme as a backup. In this case, the local authenticationscheme is adopted when the RADIUS server fails.Refer to “AAA Configuration” on page 518 for detailed information about AAAconfiguration.Basic 802.1xConfigurationTo utilize 802.1x features, you need to perform basic 802.1x configuration.Prerequisites ■ Configure ISP domain and its AAA scheme, specify the authentication scheme(RADIUS or a local scheme).■ Ensure that the service type is configured as lan-access (by using theservice-type command) for local authentication scheme.Configuring Basic 802.1xFunctionsISP domainconfiguration AAA schemeLocalauthenticationRADIUSscheme802.1xconfigurationISP domainconfiguration AAA schemeLocalauthenticationRADIUSscheme802.1xconfigurationTable 318 Configure basic 802.1x functionsOperation Command DescriptionEnter system view system-view -Enable 802.1xgloballydot1x RequiredBy default, 802.1x is disabledglobally.
