Optional) Setting A Shared Key For A Radius Server; Optional) Setting The User Name Format Supported By A Radius Server - Huawei Quidway S3700 Series Configuration Manual

Quidway S3700 Series Ethernet Switches
Configuration Guide - Security
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
radius-server authorization ip-address { server-group group-name | shared-key
{ cipher | simple } key-string }
The RADIUS authorization server is configured.
By default, no RADIUS authorization server is configured in the S3700.
----End

1.4.6 (Optional) Setting a Shared Key for a RADIUS Server

Context
When exchanging authentication packets, the S3700 and the RADIUS server encrypt important
information such as the password by using the Message Digest 5 (MD5) algorithm to ensure the
security of information transmitted over a network. To guarantee the validity of the authenticator
and the authenticated, the keys on the S3700 and the RADIUS server must be the same.
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
radius-server template template-name
The RADIUS server template view is displayed.
Step 3 Run:
radius-server shared-key [ cipher | simple ] key-string
The shared key is set for a RADIUS server.
By default, the shared key of a RADIUS server is huawei.
----End
1.4.7 (Optional) Setting the User Name Format Supported by a
RADIUS Server
Context
Issue 01 (2011-07-15)
NOTE
A user name is in the user name@domain name format and the characters after @ refer to the domain name.
In the user name, @ is the domain name delimiter. The domain name delimiter can also be any of the
following symbols: \ / : < > | ' %
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
1 AAA and User Management Configuration
*
[ ack-reserved-interval interval ]
13