Antonio Perez

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.
=====How to configure 3Com switch to support radius or local login for management=====

====Symptoms:====

Radius server offline  
could not login to switch when radius is offline

//"Need to have local authentication enabled on switch for fail safe  "//


====Fixes:====

Configure the switch to support both radius device login and local login  


Here is the configuration that work on SW5500.


  #
   password-control length 4
   password-control history 2
   password-control login-attempt 3 exceed lock-time 120
  #
   super password level 3 simple password
  #
   local-server nas-ip 127.0.0.1 key 3com
  #
   domain default enable 3comdevicelogin
  #
   dot1x
   dot1x timer tx-period 10
   dot1x timer handshake-period 1024
   dot1x authentication-method eap
  #
  radius scheme system
  #
  radius scheme 3comapsc
   server-type standard
   primary authentication 152.67.101.23
   accounting optional
   key authentication radius
   user-name-format without-domain
   nas-ip 152.67.101.54
  #
  radius scheme 3ComDeviceLogin
   server-type extended
   primary authentication 152.67.101.39
   accounting optional
   key authentication radius
   user-name-format without-domain
   nas-ip 152.67.101.54
  #
  domain 3comdevicelogin
   scheme radius-scheme 3ComDeviceLogin local
  domain apsc
   scheme radius-scheme 3comapsc
  domain system
  #
  local-user admin
   service-type ssh telnet terminal
   level 3
   password-control aging 90
  local-user manager
   service-type ssh telnet terminal
   level 2
  local-user monitor
   service-type ssh telnet terminal
   level 1
  #


//Notes: The switch support radius login, OR local login, but not both methods//


====Product(s):====


Switch 7700

Router 5000 Series

Router 3000 Series

Router 6000 Series

Switch 8800

Switch 5500

Switch 5500G

Switch 7750

Switch 4500