Configuring Radius Schemes - HPE FlexNetwork 5510 HI Series Security Configuration Manual

Step
Displaying and maintaining local users and local user groups
Execute display commands in any view.
Task
Display
configuration and online user
statistics.
Display the
configuration.

Configuring RADIUS schemes

A RADIUS scheme specifies the RADIUS servers that the device can work with and defines a set of
parameters. The device uses the parameters to exchange information with the RADIUS servers,
including the server IP addresses, UDP port numbers, shared keys, and server types.
Configuration task list
Tasks at a glance
(Optional.)
(Required.)
(Required.)
(Optional.)
(Optional.)
(Optional.)
(Optional.)
(Optional.)
(Optional.)
(Optional.)
(Optional.)
(Optional.)
(Optional.)
Command
display local-user [ class { manage | network } | idle-cut { disable |
the local user
enable } | service-type { ftp | http | https | lan-access | portal | ssh |
telnet | terminal } | state { active | block } | user-name user-name class
{ manage | network } | vlan vlan-id ]
user group
display user-group [ group-name ]
Configuring a test profile for RADIUS server status detection
Creating a RADIUS scheme
Specifying the RADIUS authentication servers
Specifying the RADIUS accounting servers and the relevant parameters
Specifying the shared keys for secure RADIUS communication
Specifying a VPN for the scheme
Setting the username format and traffic statistics units
Setting the maximum number of RADIUS request transmission attempts
Setting the status of RADIUS servers
Enabling the RADIUS server load sharing feature
Specifying the source IP address for outgoing RADIUS packets
Setting RADIUS timers
Configuring the accounting-on feature
Command
type-length ]
•
Configure the
complexity checking
password-control complexity
{ same-character
user-name } check
•
Configure the maximum login
attempts and the action to take
for login
password-control
login-attempt
[ exceed { lock | lock-time time
| unlock } ]
22
Remarks
password
policy:
|
failures:
login-times