H3C S5500-SI Series Operation Manual page 583

Hide thumbs Also See for S5500-SI Series:

Table of Contents

[Switch-isp-bbb] quit

# Configure the default AAA methods for all types of users.

[Switch] domain bbb

[Switch-isp-bbb] authentication default local

[Switch-isp-bbb] authorization default hwtacacs-scheme hwtac

[Switch-isp-bbb] accounting default radius-scheme imc

When telneting into the switch, a user enters username telnet@bbb for authentication using domain

AAA for SSH Users by a RADIUS Server

Network requirements

authorization, and accounting services to SSH users.

Configure an iMC server to act as the RADIUS server to provide authentication, authorization, and

accounting services for SSH users. The IP address of the RADIUS server is 10.1.1.1/24.

Set both the shared keys for authentication and accounting packets exchanged with the RADIUS

server to expert; and specify that a username sent to the RADIUS server carries the domain name.

The RADIUS server provides different user services according to the domain names.

Figure 1-9 Configure AAA for SSH users by a RADIUS server

192.168.1.70/24

Configuration procedure

Configure the RADIUS server. (iMC)

This example assumes that the RADIUS server runs iMC PLAT 3.20-R2602 or iMC UAM 3.60-E6102.

# Add an access device.

Log into the iMC management platform, select the Service tab, and select Access Service > Access

Device from the navigation tree to enter the Access Device page. Then, click Add to enter the Add

Access Device window and perform the following configurations:

Set both the shared keys for authentication and accounting packets to expert

1-9, configure the switch to use the RADIUS server to provide authentication,

RADIUS server

Chapters

Table of Contents