Cutting Down User Connection Forcibly; Radius Configuration - Huawei Quidway S3100 Series Operation Manual

Operation Manual – AAA&RADIUS
Quidway S3100 Series Ethernet Switches
Caution:
After the local-user password-display-mode cipher-force command is executed,
all passwords will be displayed in cipher mode even through you specify to display
user passwords in plain text by using the password command.
If the configured authentication method (local or RADIUS) requires a user name and
a password, the command level that a user can access after login is determined by
the priority level of the user. For SSH users, when they use RSA shared keys for
authentication, the commands they can access are determined by the levels set on
their user interfaces.
If the configured authentication method is none or requires a password, the
command level that a user can access after login is determined by the level of the
user interface.

1.4.3 Cutting Down User Connection Forcibly

Table 1-10 Cut down user connection forcibly
Operation
Enter system view
Cut down
connections
forcibly

1.5 RADIUS Configuration

The RADIUS protocol configuration is performed on a RADIUS scheme basis. In an
actual network environment, you can either use a single RADIUS server or two
RADIUS servers (primary and secondary servers with the same configuration but
different IP addresses) in a RADIUS scheme. After creating a new RADIUS scheme,
you should configure the IP address and UDP port number of each RADIUS server you
want to use in this scheme. These RADIUS servers fall into two types:
authentication/authorization, and accounting. And for each kind of server, you can
configure two servers in a RADIUS scheme: primary server and secondary server. A
RADIUS scheme has the following attributes: IP addresses of the primary and
secondary servers, shared keys, and types of the RADIUS servers.
Command
system-view
cut connection { all | access-type
{ dot1x | mac-authentication } |
domain domain-name | interface
user
interface-type interface-number | ip
ip-address | mac mac-address |
radius-scheme radius-scheme-name
| vlan vlan-id | ucibindex ucib-index |
user-name user-name }
Huawei Technologies Proprietary
1-17
Chapter 1 AAA&RADIUS Configuration
Description
—
Required