Huawei Quidway S3900 Series Operation Manual page 499

Operation Manual – AAA & RADIUS & HWTACACS & EAD
Quidway S3900 Series Ethernet Switches-Release 1510
Authorization: none.
Accounting: RADIUS or none.
You can configure combined authentication, authorization and accounting schemes by
using the above implementations.
For FTP users
Only authentication is supported for FTP users.
Authentication: RADIUS, local, or RADIUS-local.
Perform the following configuration in ISP domain view.
Table 1-8 Configure separate AAA schemes
Operation
Enter system view
Create an ISP domain or
enter the view of an
existing ISP domain
Configure
authentication
for the ISP domain
Configure
authorization scheme for
the ISP domain
Configure an accounting
scheme
domain
system-view
domain isp-name
authentication
{
an
radius-scheme-name [ local ] |
scheme
hwtacacs-scheme
hwtacacs-scheme-name [ local ]
| local | none }
an authorization
hwtacacs-scheme
hwtacacs-scheme-name }
accounting
radius-scheme
for the ISP radius-scheme-name
hwtacacs-scheme
hwtacacs-scheme-name }
Huawei Technologies Proprietary
Chapter 1 AAA & RADIUS & HWTACACS
Command
radius-scheme
{ none
{ none
1-18
Configuration
Description
—
Required
Optional
By default, no
separate
authentication
scheme is
configured.
Optional
By default, no
|
separate
authorization
scheme is
configured.
Optional
|
By default, no
|
separate
accounting scheme
is configured.