Creating/Deleting A Radius Scheme - Huawei Quidway S3500 Series Operation Manual

Operation Manual - Security
Quidway S3500 Series Ethernet Switches
configuration but two different IP addresses. Accordingly, attributes of every RADIUS
scheme include IP addresses of primary and second servers, shared key and RADIUS
server type etc.
Actually, RADIUS protocol configuration only defines some necessary parameters
using for information interaction between NAS and RADIUS Server. To make these
parameters effective, it is necessary to configure, in the view, an ISP domain to use the
RADIUS scheme and specify it to use RADIUS AAA schemes. For more about the
configuration commands, refer to the AAA Configuration section above.
RADIUS protocol configuration includes:

Creating/Deleting a RADIUS scheme

Setting IP Address and Port Number of RADIUS Server
Setting RADIUS packet encryption key
Setting response timeout timer of RADIUS server
Setting retransmission times of RADIUS request packet
Enabling the selection of RADIUS accounting option
Setting a real-time accounting interval
Setting maximum times of real-time accounting request failing to be responded
Enabling/Disabling stopping accounting request buffer
Setting the maximum retransmitting times of stopping accounting request
Configuring the User Re-authentication at Reboot
Setting the Supported Type of RADIUS Server
Setting RADIUS server state
Configuring the Quiet Time Interval
Setting username format transmitted to RADIUS server
Setting the unit of data flow that transmitted to RADIUS server
Setting local RADIUS authentication server
Among the above tasks, creating RADIUS scheme and setting IP address of RADIUS
server are required, while other takes are optional and can be performed as per your
requirements.
3.3.1 Creating/Deleting a RADIUS scheme
As mentioned above, RADIUS protocol configurations are performed on the per
RADIUS scheme basis. Therefore, before performing other RADIUS protocol
configurations, it is compulsory to create the RADIUS scheme and enter its view to set
its IP address.
You can use the following commands to create/delete a RADIUS scheme.
Perform the following configurations in system view.
Chapter 3 AAA and RADIUS Protocol Configuration
Huawei Technologies Proprietary
3-9