Huawei Quidway S3700 Series Configuration Manual page 89

Quidway S3700 Series Ethernet Switches
Configuration Guide - Security
l
l
Figure 2-2 Network diagram for configuring Web authentication
User
Configuration Roadmap
The configuration roadmap is as follows:
1.
2.
3.
4.
5.
Data Preparation
To complete the configuration, you need the following data:
l
l
l
l
l
l
l
Issue 01 (2011-07-15)
The user can access only the Web authentication server before authentication.
After passing the Web authentication, the user can access the external network.
Web serve r
192.168.2.20
GE0/0/1
VLAN20
GE0/0/3
VLANIF10
192.168.1.10
Switch
Set the IP address of the Layer 3 interface connected to the user.
Configure a RADIUS server template.
Configure an AAA authentication template.
Configure a domain.
Configure the Web authentication function.
IP address and URL of the Web authentication server
IP address of the Layer 3 interface connected to the authentication terminal
IP address and port number of the RADIUS authentication server
Key of the RADIUS server (hello) and the retransmission count (2)
Name of the AAA authentication scheme (web1)
Name of the RADIUS server template (rd1)
Name of the user domain (isp1)
NOTE
In this example, only the configuration of the Switch is provided, and the configurations of the Web server
and RADIUS server are omitted.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
RADIUS Server
192.168.2.30
GE0/0/2
VLANIF20
192.168.2.10
GE0/0/4
2 NAC Configuration
Internet
76