User's Manual


59JadeOSUserManual
Configuring AAA profile need to configure user role before authentication and after
authentication. Please refer to chapter 9.3 for more information.
9.4.3 Configuring Radius Server Group
Step 1 Configure Radius server RS1, including IP address of radius server, authen-
tication key and local IP address:
(JadeOS) (config)#aaa authentication-server radius RS1
(JadeOS) (RADIUS Server "RS1")#host 119.6.200.245
(JadeOS) (RADIUS Server "RS1")#key 123456
(JadeOS) (RADIUS Server "RS1")#ip 119.6.200.33
(JadeOS) (RADIUS Server "RS1")#exit
Step2 Configure Radius server group SG1，including several Radius Server.
(JadeOS) (config)#aaa server-group SG1
(JadeOS) (Server Group "SG1")#auth-server RS1
Commands supported by Radius Server
Attribute Description
acctport port number using to accounting; range: 1-65535; default value: 1813
authport
Port number using to authentication; range: 1-65535; default value: 1812
host
IP address and host name of Radius server
ip Source address of radius request
key Pre-shared key
nas-identifier nas-identifier used in RADIUS data packet
nas-ip nas-ip of RADIUS data packet
retransmit Maximum number of request; range: 0-3; default value: 3
timeout Request timeout; range: 1-30s; default value: 5s
use-md5 Encryption using MD5s
Commands supported by Radius Server Group
Attribute Description
allow-fail-through Allow traffic that failed authentication
auth-server
Distribute authentication server
set
Set Role/Vlan rule
9.4.4 Configuring Authentication Way
Authentications supported by JadeOS are captive-portal, dot1x, mac, open, psk, wep,