Table Of Contents - Huawei Quidway S9300 Configuration Manual

Quidway S9300 Terabit Routing Switch
Configuration Guide - Security
About This Document.....................................................................................................................1
1 AAA and User Management Configuration.........................................................................1-1
1.1 Introduction to AAA and User Management..................................................................................................1-2
1.2 AAA and User Management Features Supported by the S9300.....................................................................1-2
1.3 Configuring Local User Management.............................................................................................................1-3
1.3.1 Establishing the Configuration Task......................................................................................................1-4
1.3.2 Creating a Local User.............................................................................................................................1-4
1.3.3 (Optional) Setting the Access Type of the Local User...........................................................................1-5
1.3.4 (Optional) Configuring the FTP Directory That a Local User Can Access...........................................1-5
1.3.5 (Optional) Setting the Status of a Local User........................................................................................1-6
1.3.6 (Optional) Setting the Level of a Local User.........................................................................................1-6
1.3.7 (Optional) Enabling the Idle-cut Function for a Local User..................................................................1-7
1.3.8 (Optional) Forcibly Cutting a User Off..................................................................................................1-8
1.3.9 Checking the Configuration...................................................................................................................1-8
1.4 Configuring AAA Schemes............................................................................................................................1-9
1.4.1 Establishing the Configuration Task......................................................................................................1-9
1.4.2 Configuring an Authentication Scheme...............................................................................................1-10
1.4.3 Configuring an Authorization Scheme.................................................................................................1-11
1.4.4 (Optional) Configuring a Recording Scheme.......................................................................................1-13
1.4.5 Checking the Configuration.................................................................................................................1-14
1.5 Configuring a RADIUS Server Template.....................................................................................................1-15
1.5.1 Establishing the Configuration Task....................................................................................................1-16
1.5.2 Creating a RADIUS Server Template..................................................................................................1-17
1.5.3 Configuring a RADIUS Authentication Server...................................................................................1-17
1.5.4 (Optional) Configuring the Protocol Version of the RADIUS Server.................................................1-18
1.5.5 (Optional) Setting a Shared Key for a RADIUS Server.......................................................................1-18
1.5.6 (Optional) Setting the User Name Format Supported by a RADIUS Server.......................................1-19
1.5.7 (Optional) Setting the Traffic Unit for a RADIUS Server...................................................................1-19
1.5.8 (Optional) Setting Retransmission Parameters on a RADIUS Server.................................................1-20
1.5.9 Checking the Configuration.................................................................................................................1-20
1.6 Configuring an HWTACACS Server Template............................................................................................1-21
1.6.1 Establishing the Configuration Task....................................................................................................1-21
1.6.2 Creating an HWTACACS Server Template........................................................................................1-22
Issue 01 (2009-07-28) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
Contents
Contents
i