Configuring Radius Schemes - H3C S5830V2 Security Configuration Manual

Displaying and maintaining local users and local user groups
Execute display commands in any view.
Task
Display the local user
configuration and online user
statistics.
Display the user group
configuration.

Configuring RADIUS schemes

A RADIUS scheme specifies the RADIUS servers that the device can work with and defines a set of
parameters that the device uses to exchange information with the RADIUS servers, including the IP
addresses of the servers, UDP port numbers, shared keys, and server types.
Configuration task list
Tasks at a glance
(Required.)
(Required.)
(Optional.)
(Optional.)
(Optional.)
(Optional.)
(Optional.)
(Optional.)
(Optional.)
(Optional.)
(Optional.)
(Optional.)
(Optional.)
Creating a RADIUS scheme
Create a RADIUS scheme before performing any other RADIUS configurations. You can configure up to
16 RADIUS schemes. A RADIUS scheme can be referenced by multiple ISP domains.
To create a RADIUS scheme:
Step
1. Enter system view.
2. Create a RADIUS scheme and
enter its view.
Command
display local-user [ class { manage | network } | idle-cut { disable | enable }
| service-type { ftp | lan-access | ssh | telnet | terminal } | state { active |
block } | user-name user-name | vlan vlan-id ]
display user-group [ group-name ]
Creating a RADIUS scheme
Specifying the RADIUS authentication servers
Specifying the RADIUS accounting servers and the relevant parameters
Specifying the shared keys for secure RADIUS communication
Specifying a VPN for the scheme
Setting the username format and traffic statistics units
Setting the maximum number of RADIUS request transmission attempts
Setting the status of RADIUS servers
Specifying the source IP address for outgoing RADIUS packets
Setting RADIUS timers
Configuring the accounting-on feature
Configuring the IP addresses of the security policy servers
Displaying and maintaining RADIUS
Command
system-view
radius scheme
radius-scheme-name
22
Remarks
N/A
By default, no RADIUS scheme is
defined.