Configuring Radius Schemes - HP 5120 SI Series Security Configuration Manual

To do...
Configure the authorization attributes for
the user group
Displaying and maintaining local users and local user groups
To do...
Display local user information
Display the user group configuration
information

Configuring RADIUS schemes

A RADIUS scheme specifies the RADIUS servers that the device can cooperate with and defines a set of
parameters that the device uses to exchange information with the RADIUS servers. There may be
authentication/authorization servers and accounting servers, or primary servers and secondary servers.
The parameters mainly include the IP addresses of the servers, the shared keys, and the RADIUS server
type.
RADIUS scheme configuration task list
Task
Creating a RADIUS scheme
Specifying the RADIUS authentication/authorization servers
Specifying the RADIUS accounting servers and relevant parameters
Setting the shared keys for RADIUS packets
Setting the maximum number of RADIUS request transmission
attempts
Setting the supported RADIUS server type
Setting the status of RADIUS servers
Setting the username format and traffic statistics units
Use the command...
Configure the password-control composition
password type-number type-number
composition policy [ type-length type-length ]
authorization-attribute { acl
acl-number | callback-number
callback-number | idle-cut minute |
level level | user-profile profile-name |
vlan vlan-id | work-directory
directory-name } *
Use the command...
display local-user [ idle-cut { disable |
enable } | service-type { ftp |
lan-access | portal | ssh | telnet |
terminal | web } | state { active |
block } | user-name user-name | vlan
vlan-id ] [ slot slot-number ] [ | { begin |
exclude | include } regular-expression ]
display user-group [ group-name ] [ |
{ begin | exclude | include }
regular-expression ]
Remarks
Required
Required
Optional
Optional
Optional
Optional
Optional
Optional
20
Remarks
Optional
By default, the global
setting is used.
Optional
By default, no
authorization attribute is
configured for a user
group.
Remarks
Available in any view
Available in any view