Huawei Quidway S3100 Series Operation Manual page 232

Operation Manual - AAA&RADIUS
Quidway S3100 Series Ethernet Switches
Chapter 1 AAA&RADIUS Configuration ...................................................................................... 1-1
1.1 Overview ............................................................................................................................ 1-1
1.1.1 Introduction to AAA ................................................................................................. 1-1
1.1.2 Introduction to ISP Domain ..................................................................................... 1-2
1.1.3 Introduction to RADIUS........................................................................................... 1-2
1.2 Configuration Tasks ........................................................................................................... 1-8
1.3 AAA Configuration ............................................................................................................. 1-9
1.3.1 Configuration Prerequisites..................................................................................... 1-9
1.3.2 Creating an ISP Domain ....................................................................................... 1-10
1.3.3 Configuring the Attributes of an ISP Domain ........................................................ 1-10
1.3.4 Configuring an AAA Scheme for an ISP Domain.................................................. 1-11
1.4 Dynamic VLAN Assignment Configuration ...................................................................... 1-14
1.4.1 Configuring Dynamic VLAN Assignment .............................................................. 1-14
1.4.2 Configuring the Attributes of a Local User ............................................................ 1-15
1.4.3 Cutting Down User Connection Forcibly ............................................................... 1-17
1.5 RADIUS Configuration..................................................................................................... 1-17
1.5.1 Creating a RADIUS Scheme................................................................................. 1-18
1.5.2 Configuring RADIUS Authentication/Authorization Servers.................................. 1-18
1.5.3 Configuring RADIUS Accounting Servers............................................................. 1-19
1.5.4 Configuring Shared Keys for RADIUS Packets .................................................... 1-21
1.5.5 Configuring the Maximum Number of Transmission Attempts of RADIUS
Requests........................................................................................................................ 1-22
1.5.6 Configuring the Supported RADIUS Server Type................................................. 1-23
1.5.7 Configuring the Status of RADIUS Servers .......................................................... 1-23
1.5.8 Configuring the Attributes for Data to be Sent to RADIUS Servers ...................... 1-24
1.5.9 Configuring a Local RADIUS Authentication Server ............................................. 1-25
1.5.10 Configuring the Timers of RADIUS Servers........................................................ 1-26
1.5.11 Configuring Whether or not to Send Trap Message When RADIUS Server is
Down .............................................................................................................................. 1-27
1.5.12 Configuring the User Re-Authentication Upon Device Restart Function ............ 1-28
1.6 Displaying AAA&RADIUS Information ............................................................................. 1-29
1.7 AAA&RADIUS Configuration Example ............................................................................ 1-30
1.7.1 Remote RADIUS Authentication of Telnet/SSH Users ......................................... 1-30
1.7.2 Local Authentication of FTP/Telnet Users ............................................................ 1-32
1.8 Troubleshooting AAA&RADIUS Configuration ................................................................ 1-33
Table of Contents
Huawei Technologies Proprietary
i
Table of Contents