Configuring Radius; Creating A Radius Scheme - 3Com 4510G Configuration Manual

To do...
Display information about
specified or all local users
Display configuration
information about a specified
user group or all user groups

Configuring RADIUS

The RADIUS protocol is configured on a per scheme basis. After creating a RADIUS scheme, you
need to configure the IP addresses and UDP ports of the RADIUS servers for the scheme. The servers
include authentication/authorization servers and accounting servers, or primary servers and secondary
servers. In other words, the attributes of a RADIUS scheme mainly include IP addresses of primary
and secondary servers, shared key, and RADIUS server type.
Actually, the RADIUS protocol configurations only set the parameters necessary for the information
interaction between a NAS and a RADIUS server. For these settings to take effect, you must reference
the RADIUS scheme containing those settings in ISP domain view. For information about the
commands for referencing a scheme, refer to
When there are users online, you cannot modify RADIUS parameters other than the retransmission
ones and the timers.

Creating a RADIUS Scheme

Before performing other RADIUS configurations, follow these steps to create a RADIUS scheme and
enter RADIUS scheme view:
To do...
Enter system view
Create a RADIUS scheme and
enter RADIUS scheme view
A RADIUS scheme can be referenced by more than one ISP domain at the same time.
Use the command...
display local-user [ idle-cut
{ disable | enable } | service-type
{ ftp | lan-access | ssh | telnet |
terminal } | state { active | block } |
user-name user-name | vlan
vlan-id ] [ slot slot-number ]
display user-group [ group-name ]
Configuring AAA.
Use the command...
system-view
radius scheme
radius-scheme-name
1-22
Remarks
Available in any view
Available in any view
Remarks
—
Required
Not defined by default