Optional) Configuring Local Authentication On Lac Side; Optional) Configuring Radius Authentication On Lac Side - Huawei AR1200 series Configuration Manual

Huawei AR1200 Series Enterprise Routers
Configuration Guide - VPN

4.3.4 (Optional) Configuring Local Authentication on LAC Side

An LAC authenticates the user through local authentication. The LAC is configured with the
user name and password. Whether the password is in cipher text or in plaintext is determined
by the user. The password in cipher text is more secure.
Context
Do as followings on the router:
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
aaa
The AAA view is displayed.
Step 3 Run:
local-user user-name password password
The LAC checks the user name and password of an access user. If they are consistent with the
local registered user name and password, the user is valid. The access user can initiate a tunnel
connection request only after the authentication on the LAC side succeeds.
By default, the LAC side is configured with no user name and password. and the local
authentication is adopted. Therefore, the LAC side must be configured with user name and
password for local authentication.
----End

4.3.5 (Optional) Configuring RADIUS Authentication on LAC Side

An LAC sends the user name and password of the user to the RADIUS server for authentication.
The RADIUS protocol performs centralized management over a large number of dispersed users
and performs authentication, authorization, and accounting on users.
Procedure
l
Issue 01 (2012-04-20)
NOTE
For more information about Authorization, Authentication and Accounting (AAA), refer to the Huawei
AR1200 Series Enterprise Routers Configuration Guide - Security.
Creating the Authentication and Accounting (AAA) Scheme
Do as follows on the router:
1. Run:
system-view
The system view is displayed.
2. Run:
aaa
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
4 L2TP Configuration
255