HPE FlexNetwork MSR Series Comware 5 Security Configuration Guide

55
Displaying and maintaining AAA
Task Command Remarks
Display the configuration of
ISP domains.
display domain
[ isp-name ] [
|
{
begin
|
exclude
|
include
} regular-expression ]
Available in
any view.
Display information about
user connections.
display connection
[
access-type
{
dot1x
|
mac-authentication
|
portal
} |
domain
isp-name |
interface
interface-type interface-number |
ip
ip-address |
mac
mac-address |
ucibindex
ucib-index |
user-name
user-name |
vlan
vlan-id ] [
|
{
begin
|
exclude
|
include
}
regular-expression ]
Available in
any view.
AAA configuration examples
Authentication/authorization for Telnet/SSH users by a
RADIUS server
The configuration of RADIUS authentication and authorization for SSH users is the same as that for
Telnet users. This example describes the configuration for Telnet users.
Network requirements
As shown in Figure 11, configure the router to use the RADIUS server for Telnet user authentication
and authorization and add an account with the username hello@bbb on the RADIUS server, so the
Telnet user can log in to the router and is authorized with the privilege level 3 after login.
Set the shared key for secure RADIUS communication to expert, and set the ports for
authentication/authorization and accounting to 1812 and 1813, respectively. Configure the router to
include the domain name in the usernames sent to the RADIUS server.
Figure 11 Network diagram
Configuring the RADIUS server on CAMS
In this section, the RADIUS server runs on CAMS Server 2.10-R0210.
1. Add the router to CAMS as an access device:
a. From the navigation tree, select System Management > System Configuration.
b. In the System Configuration window, click Modify for the Access Device field, and then
click Add to configure the access device as follows:
− Specify the router's IP address 10.1.1.2 in the Start IP field.

HPE FlexNetwork MSR Series Specifications

General

Brand	HPE
Model	FlexNetwork MSR Series
Category	Network Router
Language	English