Local Authentication Of Ftp/Telnet Users - H3C S5600 Series Operation Manual

Hide thumbs Also See for S5600 Series:

Operation manual (1278 pages)

Configuration (313 pages)

Operation manual (24 pages)

Table of Contents

Network diagram

Figure 2-3 Remote RADIUS authentication of Telnet users

Configuration procedure

# Enter system view.

<Sysname> system-view

# Adopt AAA authentication for Telnet users.

[Sysname] user-interface vty 0 4

[Sysname-ui-vty0-4] authentication-mode scheme

[Sysname-ui-vty0-4] quit

# Configure an ISP domain.

[Sysname] domain cams

[Sysname-isp-cams] access-limit enable 10

[Sysname-isp-cams] quit

# Configure a RADIUS scheme.

[Sysname] radius scheme cams

[Sysname-radius-cams] accounting optional

[Sysname-radius-cams] primary authentication 10.110.91.164 1812

[Sysname-radius-cams] key authentication aabbcc

[Sysname-radius-cams] server-type Extended

[Sysname-radius-cams] user-name-format with-domain

[Sysname-radius-cams] quit

# Associate the ISP domain with the RADIUS scheme.

[Sysname] domain cams

[Sysname-isp-cams] scheme radius-scheme cams

A Telnet user logging into the switch by a name in the format of userid @cams belongs to the cams

domain and will be authenticated according to the configuration of the cams domain.