1.6 Configuring a Service Scheme......................................................................................................................1-25

1.6.1 Establishing the Configuration Task....................................................................................................1-25

1.6.2 Creating a Service Scheme...................................................................................................................1-26

1.6.3 Setting the Administrator Level...........................................................................................................1-26

1.6.4 Configuring a DHCP Server Group.....................................................................................................1-27

1.6.5 Configuring an Address Pool...............................................................................................................1-27

1.6.6 Configure Primary and Secondary DNS Servers.................................................................................1-28

1.6.7 Checking the Configuration.................................................................................................................1-28

1.7 Configuring a Domain...................................................................................................................................1-29

1.7.1 Establishing the Configuration Task....................................................................................................1-29

1.7.2 Creating a Domain...............................................................................................................................1-30

1.7.3 Configuring Authentication , Authorization and Accounting Schemes for a Domain........................1-31

1.7.4 Configuring a RADIUS Server Template for a Domain......................................................................1-32

1.7.5 Configuring an HWTACACS Server Template for a Domain............................................................1-32

1.7.6 (Optional) Configuring a Service Scheme for a Domain.....................................................................1-33

1.7.7 (Optional) Setting the Status of a Domain...........................................................................................1-33

1.7.8 (Optional) Configuring the Domain Name Delimiter..........................................................................1-34

1.7.9 Checking the Configuration.................................................................................................................1-34

1.8 Configuring Local User Management...........................................................................................................1-35

1.8.1 Establishing the Configuration Task....................................................................................................1-35

1.8.2 Creating a Local User...........................................................................................................................1-36

1.8.3 (Optional) Setting the Access Type of the Local User.........................................................................1-37

1.8.4 (Optional) Configuring the FTP Directory That a Local User Can Access.........................................1-37

1.8.5 (Optional) Setting the Status of a Local User......................................................................................1-38

1.8.6 (Optional) Setting the Level of a Local User.......................................................................................1-38

1.8.7 (Optional) Setting the Access Limit for a Local User..........................................................................1-39

1.8.8 Checking the Configuration.................................................................................................................1-39

1.9 Maintaining AAA and User Management....................................................................................................1-40

1.9.1 Clearing the Statistics...........................................................................................................................1-40

1.9.2 Monitoring the Running Status of AAA..............................................................................................1-40

1.9.3 Debugging............................................................................................................................................1-41

1.10 Configuration Examples..............................................................................................................................1-41

1.10.1 Example for Configuring RADIUS Authentication and Accounting................................................1-41

1.10.2 Example for Configuring HWTACACS Authentication, Accounting, and Authorization................1-44

2 NAC Configuration................................................................................................................... 2-1

2.1 Introduction to NAC........................................................................................................................................2-2

2.1.1 Web Authentication................................................................................................................................2-2

2.1.2 802.1x Authentication............................................................................................................................2-3

2.1.3 MAC Address Authentication................................................................................................................2-3

Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - Security

Issue 06 (2010-01-08)

Table of Contents