H3C SecPath F1800-A Operation Manual page 478

Operation Manual - Security Defence
H3C SecPath F1800-A Firewall
configure this authentication scheme in the domain and configure the authentication
mode as none-authentication under this scheme.
Fault IV: A Telnet user cannot enter system view even if he has passed through the
authentication when he configures RADIUS authentication.
Troubleshooting: There is no configuration of user's privilege on RADIUS server.
The user shall configure the attribute exec-privilege if he adopts RADIUS server shiva.
The user can configure the extended attribute exec-privilege (28) under the standard
attribute 26 if he tends to adopt other servers.
It's the same for FTP user. The user shall configure the attribute ftp-directory if he
adopts RADIUS server shiva. The user can configure the extended attribute
ftp-directory (29) under the standard attribute 26 if he tends to adopt other servers.
In addition, you can use the display access-user command to check whether the
user is connected to internet correctly and accounted formally. For PPP user who
requires AAA to allocate IP address, you can use the display ip pool command to
check whether the address is allocated correctly.
6.
6-126
Chapter 5 AAA