Configuring Local/Remote Logon Authentication - Huawei Quidway S1700 Series Web User Manual

Quidway S1700 Series Ethernet Switches
Web User Manual

9.1.1 Configuring Local/Remote Logon Authentication

Use the Security > AAA > System Authentication page to specify local or remote
authentication. Local authentication restricts management access based on user names and
passwords manually configured on the switch. Remote authentication uses a remote access
authentication server based on RADIUS protocols to verify management access.
To configure the method(s) of controlling management access:
1. Click Security, AAA, System Authentication.
2. Specify the authentication sequence.
3. Click Apply.
Figure 9-1 Configuring the Authentication Sequence
Issue 01 (2011-11-17)
By default, management access is always checked against the authentication database
stored on the local switch. If a remote authentication server is used, you must specify the
authentication sequence. Then specify the corresponding parameters for the remote
authentication protocol using the Security > AAA > Server page. Local and remote logon
authentication control management access via the web browser.
You can specify up to four authentication methods for any user to indicate the
authentication sequence. (1)Local, (2)RADIUS, (3) Local, RADIUS, (4) RADIUS,
Local , For example, if you select (4), the user name and password is verified on the
RADIUS server first. If the RADIUS server is not available, then authentication is
attempted using the local user name and password is checked.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd
9 Security Measures
75