Table Of Contents - Huawei Quidway S2700 Series Configuration Manual

Quidway S2700 Series Ethernet Switches
Configuration Guide - Security
About This Document.....................................................................................................................ii
1 AAA and User Management Configuration............................................................................1
1.1 Introduction to AAA and User Management.....................................................................................................2
1.2 AAA and User Management Features Supported by the S2700........................................................................2
1.3 Configuring AAA Schemes................................................................................................................................4
1.3.1 Establishing the Configuration Task.........................................................................................................4
1.3.2 Configuring an Authentication Scheme....................................................................................................5
1.3.3 Configuring an Authorization Scheme......................................................................................................6
1.3.4 Configuring an Accounting Scheme..........................................................................................................7
1.3.5 (Optional) Configuring a Recording Scheme............................................................................................8
1.3.6 Checking the Configuration.......................................................................................................................9
1.4 Configuring a RADIUS Server Template........................................................................................................10
1.4.1 Establishing the Configuration Task.......................................................................................................10
1.4.2 Creating a RADIUS Server Template.....................................................................................................11
1.4.3 Configuring a RADIUS Authentication Server.......................................................................................11
1.4.4 Configuring the RADIUS Accounting Server.........................................................................................12
1.4.5 Configuring a RADIUS Authorization Server........................................................................................12
1.4.6 (Optional) Setting a Shared Key for a RADIUS Server..........................................................................13
1.4.7 (Optional) Setting the User Name Format Supported by a RADIUS Server..........................................13
1.4.8 (Optional) Setting the Traffic Unit for a RADIUS Server......................................................................14
1.4.9 (Optional) Setting Retransmission Parameters on a RADIUS Server.....................................................14
1.4.10 (Optional) Setting the NAS Port Format of a RADIUS Server.............................................................15
1.4.11 Checking the Configuration...................................................................................................................16
1.5 Configuring an HWTACACS Server Template...............................................................................................17
1.5.1 Establishing the Configuration Task.......................................................................................................18
1.5.2 Creating an HWTACACS Server Template............................................................................................18
1.5.3 Configuring an HWTACACS Authentication Server.............................................................................19
1.5.4 Configuring an HWTACACS Authorization Server...............................................................................19
1.5.5 Configuring the HWTACACS Accounting Server.................................................................................20
1.5.6 (Optional) Configuring the Source IP Address of HWTACACS Packets..............................................20
1.5.7 (Optional) Setting the Shared Key of an HWTACACS Server...............................................................21
1.5.8 (Optional) Setting the User Name Format for an HWTACACS Server.................................................22
1.5.9 (Optional) Setting the Traffic Unit for an HWTACACS Server.............................................................22
Issue 01 (2011-07-15) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
Contents
Contents
iv