Specifications

Authentication Configuration Example
April 15, 2011 Page 29 of 36
Authentication Configuration Example
Ourexamplecoversthefoursupportedmodularswitchandthreesupportedstackablefixed
switchauthenticationtypesbeingusedinanengineeringgroup:enduserstation,anIPphone,a
printercluster,andpublicinternetaccess.Forthestackablefixedswitchdevices,theexample
assumesC3platformcapabilities.SeeFigure 4foran
overviewofthemodularswitch
authenticationconfigurationandFigure 5onpage 30foranoverviewofthestackablefixedswitch
authenticationconfiguration.
Figure 4 Modular Switch Authentication Configuration Example Overview
1
Modular Switch Router
Configure policies
Enable RADIUS
Enable multi-user authentication
4
Engineering Group
Siemens CEP
Enable CEP
Associate Policy
Enable Port
5
Printer cluster
MAC Authentication
Enable MAC authentication
Set MAC authentication password
Enable Port
3
Engineering end-user stations
801.1x authentication
Enable 802.1x
Set non-Authentication ports to force-auth
6
Public internet access
PWA Authentication
IP address: 10.10.10.101
Enable PWA
Configure IP address
Enable Enhance Mode
Enable Guest Status for RADIUS Authentification
Set Guest ID and Password
Enable Port
LAN Cloud
2
Radius Server 1
IP address: 10.20.10.01
Create RADIUS user accounts