Huawei Quidway S3900 Series Operation Manual page 695

Operation Manual - QoS&QoS Profile
Quidway S3900 Series Ethernet Switches-Release 1510
The user name is someone and its authentication password is hello. It is accessed on
Ethernet1/0/1 of the switch and belongs to the test163.net domain. Its corresponding
QoS profile is "example" and the actions of the QoS profile is to limit the bandwidth of
the traffic matching with ACL rules to 128k and remark the DSCP precedence to 46.
II. Network diagram
Switch Switch
Figure 2-2 QoS configuration example
III. Configuration procedure
(1) Configuration on the AAA server
# Configure the user authentication information and the matching relationship between
the user name and the QoS profile, and more details are not given here.
(2) Configuration on the switch
# Enable 802.1x.
<Quidway> system-view
[Quidway] dot1x
[Quidway] dot1x interface Ethernet 1/0/1
# Configure the IP address information for the RADIUS server.
[Quidway] radius scheme radius1
[Quidway-radius-radius1] primary authentication 10.11.1.1
[Quidway-radius-radius1] primary accounting 10.11.1.2
[Quidway-radius-radius1] secondary authentication 10.11.1.2
[Quidway-radius-radius1] secondary accounting 10.11.1.1
# Set the encryption passwords for the switch to exchange packets with the
authentication RADIUS servers and accounting RADIUS servers.
[Quidway-radius-radius1] key authentication name
[Quidway-radius-radius1] key accounting money
# Order the switch to delete the user domain name from the user name and then send
the user name to the RADIUS sever.
[Quidway-radius-radius1] user-name-format without-domain
Network Network Network
AAA Server AAA Server
User User
Huawei Technologies Proprietary
Chapter 2 QoS Profile Configuration
2-4