3Com 3C13636 Configuration Manual page 1040

3Com Router 3000 Ethernet Family
Configuration Guide
I. Network Requirements
Configure the router to enable the RADIUS server to provide authentication and
accounting services for Telnet users accessing the router (see the following figure).
Connect the router to the RADIUS server device (functions as both authentication and
accounting servers) whose IP address is 10.110.91.146. On the router, set both the
shared keys for encrypting authentication and accounting packets to "expert".
You can use a Huawei CAMS server as the RADIUS server. Set server-type in the
RADIUS scheme to standard or huawei if a third-party RADIUS server is used and to
huawei if a huawei CAMS server is used. On the RADIUS server, set both the shared
keys for encrypting authentication and accounting packets to "expert"; set the
authentication and accounting port numbers; add the usernames and login passwords
of the Telnet users. If the router is configured in the RADIUS scheme to send the full
username (both userid and isp-name) to the RADIUS server, the usernames added
onto the RADIUS server are in the userid@isp-name format.
II. Network diagram
Telnet user Telnet user
Figure 2-7 Configure remote RADIUS authentication for Telnet users
III. Configuration procedure
# Apply AAA authentication to Telnet users, that is, the scheme mode.
[3Com-ui-vty0-4] authentication-mode scheme
# Configure domain.
[3Com] domain cams
[3Com-isp-cams] access-limit enable 10
[3Com-isp-cams] accounting optional
[3Com-isp-cams] quit
# Configure a RADIUS scheme, adopting remote authentication.
[3Com] radius scheme cams
Chapter 2 AAA and RADIUS/HWTACACS Protocol
Authentication & accounting servers Authentication & accounting servers
( IP address:10.110.91.146 ) ( IP address:10.110.91.146 )
3Com Corporation
2-39
Internet Internet Internet Internet
Configuration