User's Manual

Configuration Guide of XGS-5240-Series
47-19
henticated or when the user fails to do so, port Ethernet1/0/2 is added into VLAN10, al
lowing the user to access the Update Server.
Fig 3-15 User Being Online, VLAN Being Offline
As illustrated in the up figure, when the users become online after a successful au
thentication, the authentication server will assign VLAN5, which makes the user and Eth
ernet1/0/6 both in VLAN5, allowing the user to access the Internet.
The following are configuration steps:
# Configure RADIUS server.
Switch(config)#radius-server authentication host 10.1.1.3
Switch(config)#radius-server accounting host 10.1.1.3
Switch(config)#radius-server key test
Switch(config)#aaa enable
Switch(config)#aaa-accounting enable
# Create VLAN100.
Switch(config)#vlan 100
# Enable the global 802.1x function
Switch(config)#dot1x enable
# Enable the 802.1x function on port Ethernet1/0/2
Switch(config)#interface ethernet1/0/2
Switch(Config-If-Ethernet1/0/2)#dot1x enable
Internet
SWITCH
Ethernet1/0/2
VLAN5
Ethernet1/0/3
VLAN10
VLAN2
Update server Authenticator server
Ethernet1/0/6
VLAN5
User