TP-Link T2500G-10MPS T2500G-10MPSUN V1 Configuration Guide - Page 671

Configuring Network Security Http default default Switch_A#show aaa authentication dot1x Methodlist pri1 pri2 pri3 pri4 default radius1 -- -- -- Switch_A#show aaa group radius1 192.168.0.10 9.3 Example for AAA Configuration Examples 9.3.1 Network Requirements As shown below, the switch needs to be managed remotely via Telnet. In addition, the senior administrator of the company wants to create an account for the less senior administrators, who can only view the configurations and some network information without the Enable password provided. Two RADIUS servers are deployed in the network to provide a safer authenticate method for the administrators trying to log in or get administrative privileges. If RADIUS Server 1 breaks down and doesn't respond to the authentication request, RADIUS Server 2 will work, so as to ensure the stability of the authentication system. Figure 9-16 Network Topology Administrator Management Network Switch RADIUS Server 1 192.168.0.10/24 Auth Port:1812 RADIUS Server 2 192.168.0.20/24 Auth Port: 1812 9.3.2 Configuration Scheme To implement this requirement, the senior administrator can create the login account and the Enable password on the two RADIUS servers, and configure the AAA feature on the switch. The IP addresses of the two RADIUS servers are 192.168.0.10/24 and 192.168.0.20/24; the authentication port number is 1812; the shared key is 123456. Configuration Guide 644