Troubleshooting Aaa&Radius Configuration - 3Com 4200G 12-Port Configuration Manual

Troubleshooting
AAA&RADIUS
Configuration
Network requirements
In the network environment shown in Figure 59, you are required to configure the
switch so that the Telnet users logging into the switch are authenticated locally.
Network diagram
Figure 59 Local authentication of Telnet users
Telnet user Telnet user
Configuration procedure
1 Method 1: Using a local authentication scheme
a Enter system view.
<S4200G> system-view
System View: return to User View with Ctrl+Z.
[4200G]
b Adopt AAA authentication for Telnet users.
[4200G] user-interface vty 0 4
[4200G-ui-vty0-4] authentication-mode scheme
c Create and configure a local user named telnet.
[4200G] local-user telnet
[4200G-luser-telnet] service-type telnet
[4200G-luser-telnet] password simple 3Com
[4200G-luser-telnet] attribute idle-cut 300 access-limit 5
[4200G] domain system
[4200G-isp-system] scheme local
A Telnet user logging into the switch with the name telnet@system belongs to the
system domain and will be authenticated according to the configuration of the
system domain.
2 Method 2: using a local RADIUS server
This method is similar to the remote authentication method described in "Remote
RADIUS Authentication of Telnet/SSH Users". You only need to change the server IP
address, the authentication password, and the UDP port number for authentication
service in configuration step "Configure a RADIUS scheme" in "Remote RADIUS
Authentication of Telnet/SSH Users"to 127.0.0.1, 3Com, and 1645 respectively, and
configure local users.
The RADIUS protocol is at the application layer in the TCP/IP protocol suite. This
protocol prescribes how the switch and the RADIUS server of the ISP exchange user
information with each other.
Symptom 1: User authentication/authorization always fails.
Troubleshooting AAA&RADIUS Configuration 189
Internet Internet Internet Internet
Internet Internet