Cutting Down User Connections Forcibly; Radius Configuration - Huawei Quidway S5600 Series Operation Manual

Operation Manual – AAA & RADIUS & HWTACACS & EAD
Quidway S5600 Series Ethernet Switches-Release 1510

1.3.7 Cutting Down User Connections Forcibly

Table 1-11 Cut down user connection forcibly
Operation
Enter system view
Cut
connections forcibly
Note:
Telnet and FTP users can use the display connection command to view the
connection, but they cannot use the cut connection command to cut down the
connection.

1.4 RADIUS Configuration

The RADIUS protocol configuration is performed on a RADIUS scheme basis. In an
actual network environment, you can either use a single RADIUS server or two
RADIUS servers (primary and secondary servers with the same configuration but
different IP addresses) in a RADIUS scheme. After creating a new RADIUS scheme,
you should configure the IP address and UDP port number of each RADIUS server you
want to use in this scheme. These RADIUS servers fall into two types:
authentication/authorization, and accounting. And for each kind of server, you can
configure two servers in a RADIUS scheme: primary server and secondary server. A
RADIUS scheme has the following attributes: IP addresses of the primary and
secondary servers, shared keys, and types of the RADIUS servers.
In an actual network environment, you can configure the above parameters as required.
But you should configure at least one authentication/authorization server and one
accounting server, and at the same time, you should keep the RADIUS service port
settings on the switch consistent with those on the RADIUS servers.
system-view
cut
access-type
mac-authentication } | domain
isp-name
down user interface-type interface-number |
ip ip-address | mac mac-address |
radius-scheme
radius-scheme-name
vlan-id | ucibindex ucib-index |
user-name user-name }
Huawei Technologies Proprietary
Chapter 1 AAA & RADIUS & HWTACACS
Command
connection { all
{ dot1x
| interface
|
1-22
Configuration
Description
—
|
|
Required
vlan