Example for Configuring 802.1x Remote Authentication to Authenticate Users Through Active/Standby RADIUS Servers

Created: Dec 17, 2016 23:09:45 930 0 0 0

Example for Configuring 802.1x Remote Authentication to Authenticate Users Through Active/Standby RADIUS Servers


Specifications

This example applies to all versions and AR routers.


Networking Requirements

PCs connect to the Internet through the router. To ensure network security, 802.1x authentication must be performed on users before they access the Internet. The IP addresses of the primary and secondary RADIUS servers are 10.10.10.1/24 and 10.10.10.2/24 respectively. When the primary RADIUS server is faulty, the router can switch services to the secondary RADIUS server within 3s.

Figure 14-3  Networking diagram for configuring 802.1x authentication
c499d0073ac74a62ab22e30e8d6559e5


Procedure

  1. Configure the router.

  2. Verify the configuration.

    On the primary RADIUS server, add user user1@huawei, set the password Huawei@2012, and configure the shared key as radius, which is the same as the shared key on the router. After the user is authenticated successfully, run the display access-user command to view the Username field, there is a user named user1 @ huawei, and the corresponding Status field displays Success.


Configuration Notes

  • The router and the primary RADIUS server must use the same port number.

  • The router and the primary RADIUS server must use the same shared key.

  • There must be a reachable route between the router and the primary RADIUS server.

  • x
  • convention:

Reply

Reply
You need to log in to reply to the post Login | Register

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " Privacy."
If the attachment button is not available, update the Adobe Flash Player to the latest version!
Fast reply Scroll to top