HP FlexFabric 5700 Series Security Configuration Manual page 35

Configuration task list
Tasks at a glance
(Required.)
(Required.)
(Optional.)
(Optional.)
(Optional.)
(Optional.)
(Optional.)
(Optional.)
(Optional.)
(Optional.)
(Optional.)
(Optional.)
(Optional.)
(Optional.)
Creating a RADIUS scheme
Create a RADIUS scheme before performing any other RADIUS configurations. You can configure a
maximum of 16 RADIUS schemes. A RADIUS scheme can be used by multiple ISP domains.
To create a RADIUS scheme:
Step
1. Enter system view.
2. Create a RADIUS scheme and
enter RADIUS scheme view.
Specifying the RADIUS authentication servers
A RADIUS authentication server completes authentication and authorization together, because
authorization information is piggybacked in authentication responses sent to RADIUS clients.
Creating a RADIUS scheme
Specifying the RADIUS authentication servers
Specifying the RADIUS accounting servers and the relevant parameters
Specifying the shared keys for secure RADIUS communication
Setting the username format and traffic statistics units
Setting the maximum number of RADIUS request transmission attempts
Setting the status of RADIUS servers
Specifying the source IP address for outgoing RADIUS packets
Setting RADIUS timers
Configuring the accounting-on feature
Configuring the IP addresses of the security policy servers
Configuring the Login-Service attribute check method for SSH, FTP, and terminal users
Enabling SNMP notifications for RADIUS
Displaying and maintaining RADIUS
Command
system-view
radius scheme
radius-scheme-name
23
Remarks
N/A
The default setting depends on the
type of the startup configuration:
•
If the device starts up with initial
settings, no RADIUS scheme is
defined.
•
If the device starts up with the
default configuration file, a
RADIUS scheme named system
is defined.
For more information about the
startup configuration, see
Fundamentals Configuration
Guide.