Huawei Quidway S2700 Series Configuration Manual page 6

Quidway S2700 Series Ethernet Switches
Configuration Guide - Security
1.5.10 (Optional) Setting HWTACACS Timers..............................................................................................23
1.5.11 (Optional) Configuring Retransmission of Accounting-Stop Packet....................................................23
1.5.12 Checking the Configuration...................................................................................................................24
1.6 Configuring a Service Scheme.........................................................................................................................24
1.6.1 Establishing the Configuration Task.......................................................................................................25
1.6.2 Creating a Service Scheme......................................................................................................................25
1.6.3 Setting the Administrator Level..............................................................................................................26
1.6.4 Configure Primary and Secondary DNS Servers....................................................................................26
1.6.5 Checking the Configuration.....................................................................................................................27
1.7 Configuring a Domain......................................................................................................................................27
1.7.1 Establishing the Configuration Task.......................................................................................................27
1.7.2 Creating a Domain...................................................................................................................................28
1.7.3 Configuring Authentication , Authorization and Accounting Schemes for a Domain............................29
1.7.4 Configuring a RADIUS Server Template for a Domain.........................................................................30
1.7.5 Configuring an HWTACACS Server Template for a Domain................................................................30
1.7.6 (Optional) Configuring a Service Scheme for a Domain........................................................................31
1.7.7 (Optional) Setting the Status of a Domain...............................................................................................31
1.7.8 (Optional) Configuring the Domain Name Delimiter.............................................................................32
1.7.9 Checking the Configuration.....................................................................................................................32
1.8 Configuring Local User Management..............................................................................................................33
1.8.1 Establishing the Configuration Task.......................................................................................................33
1.8.2 Creating a Local User..............................................................................................................................34
1.8.3 (Optional) Setting the Access Type of the Local User............................................................................34
1.8.4 (Optional) Configuring the FTP Directory That a Local User Can Access............................................35
1.8.5 (Optional) Setting the Status of a Local User..........................................................................................35
1.8.6 (Optional) Setting the Level of a Local User...........................................................................................36
1.8.7 (Optional) Setting the Access Limit for a Local User.............................................................................36
1.8.8 Checking the Configuration.....................................................................................................................37
1.9 Maintaining AAA and User Management........................................................................................................38
1.9.1 Clearing the Statistics..............................................................................................................................38
1.9.2 Monitoring the Running Status of AAA..................................................................................................38
1.9.3 Debugging...............................................................................................................................................38
1.10 Configuration Examples.................................................................................................................................39
1.10.1 Example for Configuring RADIUS Authentication and Accounting....................................................39
1.10.2 Example for Configuring HWTACACS Authentication, Accounting, and Authorization...................42
2 NAC Configuration.....................................................................................................................47
2.1 Introduction to NAC.........................................................................................................................................48
2.1.1 802.1x Authentication.............................................................................................................................48
2.1.2 MAC Address Authentication.................................................................................................................49
2.1.3 MAC address bypass authentication........................................................................................................49
2.2 NAC Features Supported by the S2700............................................................................................................49
2.3 Configuring 802.1x Authentication..................................................................................................................50
Issue 01 (2011-07-15) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
Contents
v