HPE FlexNetwork MSR Series Comware 5 Security Configuration Guide

37
Step Command Remarks
2. Enable the trap function for
RADIUS.
radius trap
{
accounting-server-down
|
authentication-error-threshold
|
authentication-server-down
}
Disabled by default.
Enabling the RADIUS client service
To receive and send RADIUS packets, enable the RADIUS client service on the device. If RADIUS is
not required, disable the RADIUS client service to avoid attacks that exploit RADIUS packets.
To enable the RADIUS client service:
Step Command Remarks
1. Enter system view.
system-view
N/A
2. Enable the RADIUS client
service.
radius client enable
Optional.
Enabled by default.
Displaying and maintaining RADIUS
Task Command Remarks
Display the configuration of RADIUS
schemes.
display radius scheme
[ radius-scheme-name ] [
|
{
begin
|
exclude
|
include
} regular-expression ]
Available in any
view.
Display the RADIUS packet statistics.
display radius statistics
[
|
{
begin
|
exclude
|
include
} regular-expression ]
Available in any
view.
Display information about buffered
stop-accounting requests for which no
responses have been received.
display stop-accounting-buffer
{
radius-scheme
radius-scheme-name |
session-id
session-id |
time-range
start-time
stop-time |
user-name
user-name } [
|
{
begin
|
exclude
|
include
} regular-expression ]
Available in any
view.
Clear RADIUS statistics.
reset radius statistics
Available in user
view.
Clear the buffered stop-accounting
requests for which no responses have
been received.
reset stop-accounting-buffer
{
radius-scheme
radius-scheme-name |
session-id
session-id |
time-range
start-time
stop-time |
user-name
user-name }
Available in user
view.
Configuring HWTACACS schemes
You cannot remove the HWTACACS schemes in use or change the IP addresses of the HWTACACS
servers in use.
HWTACACS configuration task list
Task Remarks
Creating an HWTACACS scheme
Required.
Specifying the HWTACACS authentication servers
Required.
Specifying the HWTACACS authorization servers
Optional.
Specifying the HWTACACS accounting servers and the relevant parameters
Optional.

HPE FlexNetwork MSR Series Specifications

General

Brand	HPE
Model	FlexNetwork MSR Series
Category	Network Router
Language	English