Configuration Examples; Example For Configuring Radius Authentication And Accounting - Huawei Quidway S3700 Series Configuration Manual

Quidway S3700 Series Ethernet Switches
Configuration Guide - Security
Context
Debugging affects the performance of the system. So, after debugging, run the undo debugging
all command to disable it immediately.
When a running fault occurs on the RADIUS or HWTACACS server, run the debugging
commands in the user view to locate the fault.
Procedure
l
l
----End

1.10 Configuration Examples

This section provides several configuration examples of AAA and user management.
1.10.1 Example for Configuring RADIUS Authentication and
Accounting
Networking Requirements
As shown in
domain huawei. Switch B acts as the network access server of the destination network. The
access request of the user needs to pass the network of Switch A and Switch B to reach the
authentication server. The user can access the destination network through Switch B after passing
the remote authentication. The remote authentication mode on Switch B is as follows:
l
l
Issue 01 (2011-07-15)
CAUTION
Run the debugging radius packet command to debug RADIUS packets.
Run the debugging hwtacacs { all | error | event | message | receive-packet | send-
packet } command to debug HWTACACS.
Figure 1-1, users access the network through Switch A and are located in the
The RADIUS server performs authentication and accounting for access users.
The RADIUS server 129.7.66.66/24 functions as the primary authentication and accounting
server. The RADIUS server 129.7.66.67/24 functions as the secondary authentication and
accounting server. The default authentication port and accounting port are 1812 and 1813
respectively.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
1 AAA and User Management Configuration
39