Huawei Quidway S3700 Series Configuration Manual page 95

Quidway S3700 Series Ethernet Switches
Configuration Guide - Security
1.
2.
3.
4.
Data Preparation
To complete the configuration, you need the following data:
l
l
l
l
l
Procedure
Step 1 Configure a RADIUS server template.
# Configure a RADIUS server template rd1.
[Quidway] radius-server template rd1
# Set the IP address and port number of the primary RADIUS authentication server.
[Quidway-radius-rd1] radius-server authentication 192.168.2.30 1812
# Set the key and retransmission count of the RADIUS server.
[Quidway-radius-rd1] radius-server shared-key cipher hello
[Quidway-radius-rd1] radius-server retransmit 2
[Quidway-radius-rd1] quit
Step 2 Create an authentication scheme web1 and set the authentication method to RADIUS
authentication.
[Quidway] aaa
[Quidway-aaa] authentication-scheme web1
[Quidway-aaa-authen-1] authentication-mode radius
[Quidway-aaa-authen-1] quit
Step 3 Create a domain isp1 and bind the authentication scheme and RADIUS server template to the
domain.
[Quidway-aaa] domain isp1
[Quidway-aaa-domain-isp1] authentication-scheme web1
[Quidway-aaa-domain-isp1] radius-server rd1
Step 4 Configure the MAC address authentication function.
# Enable MAC address authentication globally and on GE 0/0/1.
[Quidway] mac-authen
[Quidway] interface gigabitethernet 0/0/1
[Quidway-GigabitEthernet0/0/1] mac-authen
# Set the maximum number of access users on GE 0/0/1.
Issue 01 (2011-07-15)
Configure a RADIUS server template.
Configure an AAA authentication template.
Configure the domain of the users that use MAC address authentication.
Configure the MAC address authentication.
IP address and port number of the RADIUS authentication server
Key of the RADIUS server (hello) and the retransmission count (2)
Name of the AAA authentication scheme (web1)
Name of the RADIUS server template (rd1)
Name of the user domain (isp1)
NOTE
In this example, only the configuration of the Switch is provided, and the configuration of RADIUS server
is omitted.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
2 NAC Configuration
82