Configuring Aaa - Huawei Quidway S6500 Series Operation Manual

Operation Manual - Security
Quidway S6500 Series Ethernet Switches
II. RADIUS operation
RADIUS server generally uses proxy function of the devices like access server to
perform user authentication. The operation process is as follows: First, the user send
request message (the client username and encrypted password is included in the
message ) to RADIUS server. Second, the user will receive from RADIUS server
various kinds of response messages in which the ACCEPT message indicates that the
user has passed the authentication, and the REJECT message indicates that the user
has not passed the authentication and needs to input username and password again,
otherwise he will be rejected to access.

2.2 Configuring AAA

AAA configuration tasks include:
Table 2-1 AAA configuration
Subsectio
n
1
Task
domain
scheme
state
access-limit
Creating an ISP
domain and
configuring the
related
idle-cut enable
attributes
accounting
optional
messenger
time
self-service-url
Huawei Technologies Proprietary
2-3
Chapter 2 AAA and RADIUS Protocol
Command View
System
view
ISP
domain
view
ISP
domain
view
ISP
domain
view
ISP
domain
view
ISP
domain
view
ISP
domain
view
ISP
domain
view
Configuration
Description
Creating an ISP
domain
Configuring the
AAA scheme
Configuring the
ISP domain state
Configuring the
access limit
Enabling idle-cut
function
Enabling
accounting
optional
Enabling/disabli
ng message
alert
Configuring the
self-service
server URL