Ip Address And - H3C S5100-SI Series Operation Manual

Operation Manual – AAA
H3C S5100-SI/EI Series Ethernet Switches
Complete the following tasks to configure RADIUS (the switch functions as a local
RADIUS server):
Configuring the
RADIUS server
Configuring the
RADIUS client
The RADIUS service configuration is performed on a RADIUS scheme basis. In an
actual network environment, you can either use a single RADIUS server or two
RADIUS servers (primary and secondary servers with the same configuration but
different IP addresses) in a RADIUS scheme. After creating a new RADIUS scheme,
you should configure the IP address and UDP port number of each RADIUS server you
want to use in this scheme. These RADIUS servers fall into two types:
authentication/authorization, and accounting. And for each type of server, you can
configure two servers in a RADIUS scheme: primary server and secondary server. A
RADIUS scheme has some parameters such as IP addresses of the primary and
secondary servers, shared keys, and types of the RADIUS servers.
In an actual network environment, you can configure the above parameters as required.
But you should configure at least one authentication/authorization server and one
accounting server, and you should keep the RADIUS server port settings on the switch
consistent with those on the RADIUS servers.
Task
Creating a RADIUS Scheme
Configuring RADIUS
Authentication/Authorization Servers
Configuring RADIUS Accounting Servers
Configuring Shared Keys for RADIUS
Messages
Configuring the Maximum Number of
RADIUS Request Transmission Attempts
Configuring the Type of RADIUS Servers
to be Supported
Configuring the Status of RADIUS Servers
Configuring the Attributes of Data to be
Sent to RADIUS Servers
Configuring the Local RADIUS Server
Configuring Timers for RADIUS Servers
Enabling Sending Trap Message when a
RADIUS Server Goes Down
Refer to the configuration of the RADIUS
client
2-12
Chapter 2 AAA Configuration
Remarks
Required
Required
Required
Optional
Optional
Optional
Optional
Optional
Required
Optional
Optional
—