H3C SecPath F1800-A Operation Manual page 351

Operation Manual - Security Defence
H3C SecPath F1800-A Firewall
3.5 Typical Example for Configuring NAT ............................................................................. 6-78
Chapter 4 IDS Cooperation......................................................................................................... 6-81
4.1 Introduction to the IDS Cooperation ................................................................................ 6-81
4.2 IDS Cooperation Configuration........................................................................................ 6-82
4.2.1 Configuring the External IDS Server Address....................................................... 6-82
4.2.2 Configuring a Firewall Port Communicating with the External IDS Server ........... 6-83
4.2.3 Configuring the Packet Authentication Mode........................................................ 6-83
4.2.4 Enabling or Disabling the External IDS................................................................. 6-84
4.3 Displaying and Debugging IDS Cooperation ................................................................... 6-84
4.4 Typical Example for Configuring IDS Cooperation .......................................................... 6-85
Chapter 5 AAA ............................................................................................................................. 6-86
5.1 AAA Overview.................................................................................................................. 6-86
5.1.1 Introduction to AAA ............................................................................................... 6-86
5.1.2 Introduction to RADIUS Protocol........................................................................... 6-87
5.1.3 Introduction to the HWTACACS Protocol ............................................................. 6-90
5.1.4 Introduction to Domain .......................................................................................... 6-91
5.1.5 Introduction to Local User Management ............................................................... 6-91
5.2 AAA Configuration ........................................................................................................... 6-91
5.2.1 Entering AAA View ................................................................................................ 6-92
5.2.2 Configuring an Authentication Scheme................................................................. 6-92
5.2.3 Configuring an Authorization Scheme................................................................... 6-93
5.2.4 Configuring a Recording Scheme ......................................................................... 6-94
5.2.5 Setting Parameters for a CAR Level ..................................................................... 6-96
5.2.6 Assigning an IP Address to a PPP User ............................................................... 6-96
5.3 RADIUS Configuration..................................................................................................... 6-98
5.3.1 Creating a RADIUS Server Template ................................................................... 6-99
5.3.2 Configuring a RADIUS Authentication Server....................................................... 6-99
5.3.3 Configuring a Protocol Version for the RADIUS Server...................................... 6-100
5.3.4 Configuring a Key for the RADIUS Server .......................................................... 6-100
5.3.5 Configuring a User Name Format for the RADIUS Server ................................. 6-101
5.3.6 Configuring a Traffic Unit for the RADIUS Server............................................... 6-101
5.3.7 Configuring Retransmission for the RADIUS Server .......................................... 6-102
5.3.8 Configuring a NAS Port for the RADIUS Server ................................................. 6-102
5.4 HWTACACS Configuration............................................................................................ 6-103
5.4.1 Creating an HWTACACS Server Template ........................................................ 6-103
5.4.2 Configuring an HWTACACS Authentication Server............................................ 6-104
5.4.3 Configuring an HWTACACS Authorization Server ............................................. 6-105
5.4.4 Configuring a Key for the HWTACACS Server ................................................... 6-105
5.4.5 Configuring a User Name Format for the HWTACACS Server .......................... 6-105
5.4.6 Configuring a Traffic Unit for the HWTACACS Server........................................ 6-106
5.4.7 Assigning a Source IP Address for the HWTACACS Server.............................. 6-106
5.4.8 Configuring a Timer for the HWTACACS Server ................................................ 6-107
iii
Table of Contents