Configuration prerequisites

• Configure an ISP domain and AAA scheme (local or RADIUS authentication) for 802.1X users.

• If RADIUS authentication is used, create user accounts on the RADIUS server.

• If local authentication is used, create local user accounts on the access device and set the service type to lan-access.

• If you want to use EAP relay when the RADIUS server does not support any EAP authentication method or no RADIUS server is available, configure the EAP server function on your network access device. The support for local EAP server varies with device models.

For how to configure RADIUS client and local EAP authentication, see "Configuring AAA."