Local Authentication Of Ftp/Telnet Users - Huawei Quidway S3100 Series Operation Manual

Operation Manual – AAA&RADIUS
Quidway S3100 Series Ethernet Switches
[Quidway-ui-vty0-4] authentication-mode scheme
# Configure an ISP domain.
[Quidway] domain cams
[Quidway-isp-cams] access-limit enable 10
[Quidway-isp-cams] quit
# Configure a RADIUS scheme.
[Quidway] radius scheme cams
[Quidway-radius-cams] accounting optional
[Quidway-radius-cams] primary authentication 10.110.91.164 1812
[Quidway-radius-cams] key authentication expert
[Quidway-radius-cams] server-type Huawei
[Quidway-radius-cams] user-name-format with-domain
[Quidway-radius-cams] quit
# Associate the ISP domain with the RADIUS scheme.
[Quidway] domain cams
[Quidway-isp-cams] scheme radius-scheme cams
A Telnet user logging into the switch by a name in the format of userid @cams belongs
to the cams domain and will be authenticated according to the configuration of the
cams domain.

1.7.2 Local Authentication of FTP/Telnet Users

Note:
The configuration procedure for the local authentication of FTP users is similar to that of
Telnet users. The following description only takes the local authentication of Telnet
users as example.
I. Network requirements
In the network environment shown in Figure 1-6, you are required to configure the
switch so that the Telnet users logging into the switch are authenticated locally.
II. Network diagram
Telnet user Telnet user
Figure 1-6 Local authentication of Telnet users
Huawei Technologies Proprietary
1-32
Chapter 1 AAA&RADIUS Configuration
Internet Internet Internet Internet
Internet Internet