Aaa And Radius/Hwtacacs Protocol Configuration Examples - 3Com 8807 Configuration Manual

262 C 26: AAA
HAPTER
AAA and
RADIUS/HWTACACS
Protocol
Configuration
Examples
RADIUS/HWTACACS P
AND
Table 242 Display and debug AAA and RADIUS/HWTACACS protocol
Operation
Display all global NAS-IP
information configured in system
view
Display the statistics of RADIUS
packets
Display the stop-accounting
requests saved in buffer without
response
Reset the statistics of RADIUS
server
Display the specified or all the
HWTACACS schemes
Display the HWTACACS
stop-accounting requests saved
in buffer without response
Delete the stop-accounting
requests saved in buffer without
response
Delete the HWTACACS
stop-accounting requests saved
in buffer without response
Reset the statistics of
HWTACACS server
Enable RADIUS packet debugging debugging radius packet
Disable RADIUS packet
debugging
Enable debugging of local
RADIUS authentication server
Disable debugging of local
RADIUS authentication server
Enable HWTACACS debugging
Disable HWTACACS debugging
For the hybrid configuration example of AAA/RADIUS/HWTACACS protocol and
802.1x protocol, refer to the part "802.1x".
Perform the following configuration in system view.
Table 243 Enable/disable the anti-attack function of packets
Operation
Enable/disable the anti-attack function of
packets
The anti-attack function of IP packets is enabled while the anti-attack function of
ARP packets and dot1x packets are disabled by default.
C
ROTOCOL ONFIGURATION
Command
display radius nas-ip
display radius statistics
display stop-accounting-buffer { radius-scheme
radius-scheme-name | session-id session-id | time-range
start-time stop-time | user-name user-name }
reset radius statistics
display hwtacacs [ hwtacacs-server-name ]
display stop-accounting-buffer hwtacacs-scheme
hwtacacs-scheme-name
reset stop-accounting-buffer { radius-scheme
radius-scheme-name | session-id session-id | time-range
start-time stop-time | user-name user-name }
reset stop-accounting-buffer hwtacacs-scheme
hwtacacs-scheme-name
reset hwtacacs statistics { accounting | authentication
| authorization | all }
undo debugging radius packet
debugging local-server { all | error | event | packet }
undo debugging local-server { all | error | event |
packet }
debugging hwtacacs { all | error | event | message |
receive-packet | send-packet }
undo debugging hwtacacs { all | error | event |
message | receive-packet | send-packet }
Command
anti-attack { arp | dot1x | ip } { disable |
enable }