Creating A Radius Scheme; Configuring Radius Authentication/Authorization Servers - H3C S5600 Series Operation Manual

Operation Manual – AAA
H3C S5600 Series Ethernet Switches
Note:
Actually, the RADIUS service configuration only defines the parameters for information
exchange between switch and RADIUS server. To make these parameters take effect,
you must reference the RADIUS scheme configured with these parameters in an ISP
domain view (refer to

2.2.1 Creating a RADIUS Scheme

The RADIUS protocol configuration is performed on a RADIUS scheme basis. You
should first create a RADIUS scheme and enter its view before performing other
RADIUS protocol configurations.
Follow these steps to create a RADIUS scheme:
To do...
Enter system view
Enable RADIUS
authentication port
Create a RADIUS
scheme and enter its
view
Note:
A RADIUS scheme can be referenced by multiple ISP domains simultaneously.

2.2.2 Configuring RADIUS Authentication/Authorization Servers

Follow these steps to configure RADIUS authentication/authorization servers:
Enter system view
Create a RADIUS scheme
and enter its view
AAA Configuration).
Use the command...
system-view
radius client enable
radius scheme
radius-scheme-name
To do...
system-view
radius scheme
radius-scheme-name
—
Optional
By default, RADIUS
authentication port is enabled.
Required
By default, a RADIUS scheme
named "system" has already
been created in the system.
Use the command...
2-13
Chapter 2 AAA Configuration
Remarks
Remarks
—
Required
By default, a RADIUS
scheme named "system"
has already been created
in the system.