Huawei Quidway S5600 Series Operation Manual page 529

Operation Manual – AAA & RADIUS & HWTACACS & EAD
Quidway S5600 Series Ethernet Switches-Release 1510
Chapter 1 AAA & RADIUS & HWTACACS Configuration .......................................................... 1-1
1.1 Overview ............................................................................................................................ 1-1
1.1.1 Introduction to AAA ................................................................................................. 1-1
1.1.2 Introduction to ISP Domain ..................................................................................... 1-2
1.1.3 Introduction to RADIUS........................................................................................... 1-2
1.1.4 Introduction to HWTACACS.................................................................................... 1-8
1.2 Configuration Tasks ......................................................................................................... 1-10
1.3 AAA Configuration ........................................................................................................... 1-13
1.3.1 Configuration Prerequisites................................................................................... 1-14
1.3.2 Creating an ISP Domain ....................................................................................... 1-14
1.3.3 Configuring the Attributes of an ISP Domain ........................................................ 1-14
1.3.4 Configuring an AAA Scheme for an ISP Domain.................................................. 1-16
1.3.5 Configuring Dynamic VLAN Assignment .............................................................. 1-18
1.3.6 Configuring the Attributes of a Local User ............................................................ 1-20
1.3.7 Cutting Down User Connections Forcibly ............................................................. 1-22
1.4 RADIUS Configuration..................................................................................................... 1-22
1.4.1 Creating a RADIUS Scheme................................................................................. 1-23
1.4.2 Configuring RADIUS Authentication/Authorization Servers.................................. 1-23
1.4.3 Configuring RADIUS Accounting Servers............................................................. 1-24
1.4.4 Configuring Shared Keys for RADIUS Packets .................................................... 1-26
1.4.5 Configuring the Maximum Number of Transmission Attempts of RADIUS
Requests........................................................................................................................ 1-27
1.4.6 Configuring the Supported RADIUS Server Type................................................. 1-28
1.4.7 Configuring the Status of RADIUS Servers .......................................................... 1-28
1.4.8 Configuring the Attributes for Data to be Sent to RADIUS Servers ...................... 1-29
1.4.9 Configuring a Local RADIUS Authentication Server ............................................. 1-30
1.4.10 Configuring the Timers of RADIUS Servers........................................................ 1-31
1.4.11 Configuring Whether or not to Send Trap Message When RADIUS Server is
Down .............................................................................................................................. 1-32
1.4.12 Configuring the User Re-Authentication upon Device Restart Function............. 1-32
1.5 HWTACACS Configuration.............................................................................................. 1-34
1.5.1 Creating a HWTACAS Scheme ............................................................................ 1-34
1.5.2 Configuring HWTACACS Authentication Servers................................................. 1-35
1.5.3 Configuring HWTACACS Authorization Servers................................................... 1-35
1.5.4 Configuring HWTACACS Accounting Servers...................................................... 1-36
1.5.5 Configuring Shared Keys for RADIUS Packets .................................................... 1-37
1.5.6 Configuring the Attributes for Data to be Sent to TACACS Servers ..................... 1-38
1.5.7 Configuring the Timers of TACACS Servers......................................................... 1-39
Table of Contents
Huawei Technologies Proprietary
i
Table of Contents