Huawei Quidway S6500 Series Operation Manual page 458

Operation Manual - Security
Quidway S6500 Series Ethernet Switches
different ISPs. Because the attributes of ISP users, such as username and password
formats, etc, may be different, it is necessary to differentiate them by ISP domains.
For a switch, each supplicant belongs to an ISP domain. Up to 16 domains can be
configured in the system. If a user has not reported its ISP domain name, the system
will put it into the default domain.
Perform the following configurations in system view.
Table 2-2 Creating/deleting an ISP domain
Create ISP domain or enter the view of a
specified domain.
Remove a specified ISP domain
Enable the default ISP domain specified by
isp-name
Restore the default ISP domain to "system"
By default, a domain named "system" has been created in the system. Its attributes are
all default values.
II. Configuring the AAA scheme
The AAA schemes includes:
RADIUS scheme (radius-scheme): You can reference an already configured
radius-scheme-name to implement the AAA services.
Local scheme (local): Only authentication and authorization are implemented;
accounting is not implemented.
None (none): No authentication and accounting.
When using radius-scheme radius-scheme-name local in the configuration command,
the local refers to the alternative authentication scheme if the RADIUS server returns
no normal response. That is, when the RADIUS server operates normally, the local
scheme is not used; otherwise, the local scheme is used.
Perform the following configuration in ISP domain view.
Table 2-3 Configuring AAA scheme adopted by the ISP domain
Configure an AAA scheme for the
domain.
Configure an RADIUS scheme
Restore the default AAA scheme.
Operation
Operation
Huawei Technologies Proprietary
Chapter 2 AAA and RADIUS Protocol
domain isp-name
undo domain isp-name
domain default enable isp-name
domain default disable
Command
scheme
radius-scheme-name [ local ] | local | none }
radius-scheme radius-scheme-name
undo scheme [ radius-scheme | none ]
2-5
Configuration
Command
{
radius-scheme