Table Of Contents - Huawei Quidway S9300 Configuration Manual

Quidway S9300 Terabit Routing Switch
Configuration Guide - Security
About This Document.....................................................................................................................1
1 AAA and User Management Configuration.........................................................................1-1
1.1 Introduction to AAA and User Management..................................................................................................1-2
1.2 AAA and User Management Features Supported by the S9300.....................................................................1-2
1.3 Configuring AAA Schemes............................................................................................................................1-4
1.3.1 Establishing the Configuration Task......................................................................................................1-4
1.3.2 Configuring an Authentication Scheme.................................................................................................1-5
1.3.3 Configuring an Authorization Scheme...................................................................................................1-6
1.3.4 Configuring an Accounting Scheme......................................................................................................1-8
1.3.5 (Optional) Configuring a Recording Scheme.........................................................................................1-9
1.3.6 Checking the Configuration.................................................................................................................1-10
1.4 Configuring a RADIUS Server Template.....................................................................................................1-10
1.4.1 Establishing the Configuration Task....................................................................................................1-11
1.4.2 Creating a RADIUS Server Template..................................................................................................1-12
1.4.3 Configuring a RADIUS Authentication Server...................................................................................1-12
1.4.4 Configuring the RADIUS Accounting Server.....................................................................................1-12
1.4.5 Configuring a RADIUS Authorization Server.....................................................................................1-13
1.4.6 (Optional) Setting a Shared Key for a RADIUS Server.......................................................................1-13
1.4.7 (Optional) Setting the User Name Format Supported by a RADIUS Server.......................................1-14
1.4.8 (Optional) Setting the Traffic Unit for a RADIUS Server...................................................................1-15
1.4.9 (Optional) Setting Retransmission Parameters on a RADIUS Server.................................................1-15
1.4.10 (Optional) Setting the NAS Port Format of a RADIUS Server.........................................................1-16
1.4.11 Checking the Configuration...............................................................................................................1-17
1.5 Configuring an HWTACACS Server Template............................................................................................1-18
1.5.1 Establishing the Configuration Task....................................................................................................1-18
1.5.2 Creating an HWTACACS Server Template........................................................................................1-19
1.5.3 Configuring an HWTACACS Authentication Server..........................................................................1-19
1.5.4 Configuring the HWTACACS Accounting Server..............................................................................1-20
1.5.5 Configuring an HWTACACS Authorization Server...........................................................................1-20
1.5.6 (Optional) Configuring the Source IP Address of HWTACACS Packets...........................................1-21
1.5.7 (Optional) Setting the Shared Key of an HWTACACS Server...........................................................1-21
1.5.8 (Optional) Setting the User Name Format for an HWTACACS Server..............................................1-22
1.5.9 (Optional) Setting the Traffic Unit for an HWTACACS Server..........................................................1-23
Issue 06 (2010-01-08) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
Contents
Contents
i