Huawei Quidway S9300 Configuration Manual page 109

Quidway S9300 Terabit Routing Switch
Configuration Guide - Security
Configuration Roadmap
The configuration roadmap is as follows:
1.
2.
3.
4.
Data Preparation
To complete the configuration, you need the following data:
l
l
l
l
l
Procedure
Step 1 Configure a RADIUS server template.
# Configure a RADIUS server template rd1.
[Quidway] radius-server template rd1
# Set the IP address and port number of the primary RADIUS authentication server.
[Quidway-radius-rd1] radius-server authentication 192.168.2.30 1812
# Set the key and retransmission count of the RADIUS server.
[Quidway-radius-rd1] radius-server shared-key cipher hello
[Quidway-radius-rd1] radius-server retransmit 2
[Quidway-radius-rd1] quit
Step 2 Create an authentication scheme web1 and set the authentication method to RADIUS
authentication.
[Quidway] aaa
[Quidway-aaa] authentication-scheme web1
[Quidway-aaa-authen-1] authentication-mode radius
[Quidway-aaa-authen-1] quit
Step 3 Create a domain isp1 and bind the authentication scheme and RADIUS server template to the
domain.
[Quidway-aaa] domain isp
[Quidway-aaa-domain-isp1] authentication-scheme web1
[Quidway-aaa-domain-isp1] radius-server rd1
Step 4 Configure the MAC address authentication function.
Issue 06 (2010–01–08)
Configure a RADIUS server template.
Configure an AAA authentication template.
Configure the domain of the users that use MAC address authentication.
Configure the MAC address authentication.
IP address and port number of the RADIUS authentication server
Key of the RADIUS server (hello) and the retransmission count (2)
Name of the AAA authentication scheme (web1)
Name of the RADIUS server template (rd1)
Name of the user domain (isp1)
NOTE
In this example, only the configuration of the S9300 is provided, and the configuration of RADIUS server
is omitted.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
2 NAC Configuration
2-39