Radius Configuration - H3C SecPath F1800-A Operation Manual

Operation Manual - Security Defence
H3C SecPath F1800-A Firewall
If the user is not assigned with any IP address in the above two methods or the
local authentication is used, the command configured on the corresponding
interface will be used to assign an IP address to the user. In the event that the
command is to allocate an IP address, the IP address of the interface is directly
assigned to the user but the IP address can be assigned for once only. In the
event that the command is to configure an address pool, the system assigns an
IP address from the corresponding address pool to the user in AAA view or
outputs the failure prompt information if the assignment fails.
2) With respect to the user without being authenticated, the address allocation
depends on the configuration on the interface. The allocation mode is similar to
that in the default domain.
3) As for a user within a domain, if the RADIUS or HWTACACS authentication is
adopted and the server has assigned an IP address to the user, the IP address
assigned by the server is preferred. If the server distributes an address pool
instead of an IP address, the user can obtain an IP address from the
corresponding address pool. If the user is not assigned with any IP address in
the above two methods or the local authentication is used, the system will search
the address pools configured one by one in the corresponding domain for an IP
address to the user and will quit directly if no suitable IP address is found.

5.3 RADIUS Configuration

The RADIUS configuration includes:
Creating a RADIUS server template
Configuring a RADIUS authentication server
Configuring a protocol version for the RADIUS server
Configuring a key for the RADIUS server
Configuring a user name format for the RADIUS server
Configuring a traffic unit for the RADIUS server
Configuring retransmission to the RADIUS server
Configuring a NAS port to the RADIUS server
Note:
Although the most items in the RADIUS configuration have default values, you'd
better configure according to the practical networking requirements.
6-98
Chapter 5 AAA