User`s manual

316
DWS-1008 User’s Manual
D-Link Systems, Inc.
Conguring AAA for Network Users
Enabling PEAP-MS-CHAP-V2 Authentication
The following example illustrates how to enable local PEAP-MS-CHAP-V2 authentication
for all 802.1X network users. This example includes local usernames, passwords, and
membership in a VLAN. This example includes one username and an optional attribute for
session-timeout in seconds. Because the switch requires a certicate for authentication,
conguration of a self-signed certicate is shown.
1. To set authentication for all 802.1X users of SSID thiscorp, type the following
command:
DWS-1008# set authentication dot1x ssid thiscorp * peap-mschapv2 local
2. To add user Natasha to the local database on the switch, type the following
command:
DWS-1008# set user Natasha password moon
3. To assign Natasha to a VLAN named red, type the following command:
DWS-1008# set user Natasha attr vlan-name red
4. To assign Natasha a session timeout value of 1200 seconds, type the following
command:
DWS-1008# set user Natasha attr session-timeout 1200
5. To generate a public-private key pair and a self-signed EAP certicate, type the
following commands:
DWS-1008# crypto generate key eap 1024
key pair generated
DWS-1008# crypto generate self-signed eap
Country Name: US
State Name: CA
Locality Name: Campus1
Organizational Name: Example
Organizational Unit: IT
Common Name: SW33
Email Address: [e-mail]
Unstructured Name: wiring closet 22
6. Save the conguration:
DWS-1008 save cong
success: configuration saved.