Radius Scheme - Huawei Quidway S2000 Series Command Manual

Command Manual - Security
Quidway S2000 Series Ethernet Switches
Description
Using primary authentication command, you can configure the IP address and port
number for the primary RADIUS authentication/authorization. Using undo primary
authentication command, you can restore the default IP address and port number of
the primary RADIUS authentication/authorization.
After creating a RADIUS server group, you are supposed to set IP addresses and UDP
port numbers
authentication/authorization servers and accounting servers. In real networking
environments, the above parameters shall be set according to the specific
requirements. However, at least you have to set one authentication/authorization
server and an accounting server. Besides, ensure that the RADIUS service port
settings on the Ethernet switch is consistent with the port settings on the RADIUS
server.
For the related commands, see key, radius scheme , state.
Example
# Set the IP address of the primary authentication/authorization server of RADIUS
server group, "huawei", to 10.110.1.1 and the UDP port 1812 to provide RADIUS
authentication/authorization service.
[Quidway-radius-huawei] primary authentication auth 10.110.1.1 1812

2.2.10 radius scheme

Syntax
radius scheme radius-server-name
undo radius scheme radius-server-name
View
System view
Parameter
radius-server-name: Specifies the Radius server name with a character string not
exceeding 32 characters, excluding "/", ":", "*", "?", "<" and ">".
Description
Using radius scheme command, you can configure a RADIUS server group and enter
its view. Using undo radius scheme command, you can cancel the specified RADIUS
server group.
By default, RADIUS server group named "system" has been created in the system. The
attributes of "system" are all default values.
for the RADIUS
2-23
Chapter 2 AAA Configuration Commands
servers, including primary/second