H3C S9500 Series Operation Manual page 1144

Operation Manual – AAA RADIUS HWTACACS
H3C S9500 Series Routing Switches
Chapter 1 AAA, RADIUS and HWTACACS Protocol Configuration ......................................... 1-1
1.1 AAA, RADIUS and HWTACACS Protocol Overview ......................................................... 1-1
1.1.1 AAA Overview ......................................................................................................... 1-1
1.1.2 RADIUS Protocol Overview .................................................................................... 1-1
1.1.3 HWTACACS Protocol Overview ............................................................................. 1-3
1.1.4 Implementing AAA/RADIUS on a Switch ................................................................ 1-5
1.2 AAA Configuration ............................................................................................................. 1-6
1.2.1 Creating/Deleting an ISP Domain ........................................................................... 1-6
1.2.2 Configuring Relevant Attributes of an ISP Domain ................................................. 1-7
1.2.3 Configuring Self-Service Server URL...................................................................... 1-9
1.2.4 Creating/Deleting a Local User ............................................................................... 1-9
1.2.5 Setting the Attributes of a Local User ................................................................... 1-10
1.2.6 Disconnecting a User by Force ............................................................................. 1-12
1.2.7 Configuring Dynamic VLAN Delivering ................................................................. 1-12
1.3 RADIUS Protocol Configuration....................................................................................... 1-14
1.3.1 Creating/Deleting a RADIUS scheme ................................................................... 1-15
1.3.2 Setting IP Address and Port Number of a RADIUS Server .................................. 1-15
1.3.3 Setting the RADIUS Packet Encryption Key ......................................................... 1-17
1.3.4 Configuring VPN of RADIUS Server ..................................................................... 1-18
1.3.5 Setting the Port State of the Local RADIUS Server .............................................. 1-18
1.3.6 Setting the Maximum Retry Times for RADIUS Request Packets........................ 1-19
1.3.7 Setting RADIUS Server Response Timeout Timer ............................................... 1-19
1.3.8 Setting Quiet Time of RADIUS Server .................................................................. 1-20
1.3.9 Setting the Retransmission Times of RADIUS Request Packets ......................... 1-20
1.3.10 Enabling the Selection of Radius Accounting Option.......................................... 1-21
1.3.11 Setting a Real-time Accounting Interval.............................................................. 1-21
1.3.12 Setting the Maximum Times of Real-time Accounting Request Failing to be
Responded ..................................................................................................................... 1-22
1.3.13 Enabling/Disabling Stop-Accounting Request Buffer.......................................... 1-22
1.3.14 Setting the Maximum Retransmitting Times of Stop-Accounting Request ......... 1-23
1.3.15 Setting the Supported Type of RADIUS Server .................................................. 1-23
1.3.16 Setting RADIUS Server State ............................................................................. 1-24
1.3.17 Setting the Username Format Transmitted to RADIUS Server .......................... 1-24
1.3.18 Setting the Unit of Data Flow that Transmitted to RADIUS Server..................... 1-25
1.3.19 Configuring the Source Address Used by NAS in RADIUS Packets .................. 1-25
1.3.20 Setting the Port State of RADIUS Client ............................................................. 1-26
1.3.21 Specifying the Security Policy Servers ............................................................... 1-27
1.3.22 Configuring a Local RADIUS Authentication Server ........................................... 1-27
Table of Contents
i
Table of Contents