Huawei Quidway S3500 Series Operation Manual page 468

Operation Manual - Security
Quidway S3500 Series Ethernet Switches
2.2.5 Layer 3 Portal Authentication Configuration Example .......................................... 2-10
2.3 Portal Authentication-Free User and Free IP address Configurations ............................ 2-11
2.3.1 Portal Authentication-Free User and Free IP Address Configuration Tasks ........ 2-11
2.3.2 Portal Authentication-Free User and Free IP Configuration Example .................. 2-12
2.4 Portal Rate limitation Configurations ............................................................................... 2-14
2.4.1 Portal Rate limitation Configuration Tasks............................................................ 2-14
2.4.2 Portal Rate limitation Configuration Example ....................................................... 2-14
2.5 Portal User Deletion......................................................................................................... 2-14
2.5.1 Portal User Deletion Configuration Tasks............................................................. 2-14
2.5.2 Portal User Deletion Configuration Example ........................................................ 2-15
Chapter 3 AAA and RADIUS Protocol Configuration ................................................................ 3-1
3.1 AAA and RADIUS Protocol Overview................................................................................ 3-1
3.1.1 AAA Overview ......................................................................................................... 3-1
3.1.2 RADIUS Protocol Overview .................................................................................... 3-1
3.1.3 Implementing AAA/RADIUS on Ethernet Switch .................................................... 3-2
3.2 AAA Configuration ............................................................................................................. 3-3
3.2.1 Creating/Deleting ISP Domain ................................................................................ 3-3
3.2.2 Configuring Relevant Attributes of ISP Domain ...................................................... 3-4
3.2.3 Creating a Local User ............................................................................................. 3-5
3.2.4 Setting Attributes of Local User............................................................................... 3-5
3.2.5 Disconnecting a User by Force ............................................................................... 3-7
3.2.6 Configuring Dynamic VLAN with RADIUS Server................................................... 3-7
3.3 Configuring RADIUS Protocol............................................................................................ 3-8
3.3.1 Creating/Deleting a RADIUS scheme ..................................................................... 3-9
3.3.2 Setting IP Address and Port Number of RADIUS Server...................................... 3-10
3.3.3 Setting RADIUS Packet Encryption Key ............................................................... 3-11
3.3.4 Setting Response Timeout Timer of RADIUS Server ........................................... 3-12
3.3.5 Setting Retransmission Times of RADIUS Request Packet ................................. 3-12
3.3.6 Enabling The Selection Of Radius Accounting Option.......................................... 3-13
3.3.7 Setting a Real-time Accounting Interval................................................................ 3-13
3.3.8 Setting Maximum Times of Real-time Accounting Request Failing to be
Responded .................................................................................................................... 3-14
3.3.9 Enabling/Disabling Stopping Accounting Request Buffer ..................................... 3-15
3.3.10 Setting the Maximum Retransmitting Times of Stopping Accounting Request .. 3-15
3.3.11 Configuring the User Re-authentication at Reboot ............................................. 3-16
3.3.12 Setting the Supported Type of RADIUS Server .................................................. 3-17
3.3.13 Setting RADIUS Server State ............................................................................. 3-18
3.3.14 Configuring the Quiet Time Interval .................................................................... 3-18
3.3.15 Setting Username Format Transmitted to RADIUS Server ................................ 3-19
3.3.16 Setting the Unit of Data Flow that Transmitted to RADIUS Server..................... 3-20
3.3.17 Configuring Local RADIUS Authentication Server .............................................. 3-20
3.4 Displaying and Debugging AAA and RADIUS Protocol................................................... 3-21
Huawei Technologies Proprietary
ii
Table of Contents