Huawei Quidway S1700 Series

Quidway S1700 Series Ethernet Switches
Web User Manual 9 Security Measures
Issue 01 (2011-11-17) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd
74
9 Security Measures
About This Chapter
9.1 AAA
9.2 Configuring User Accounts
9.3 Network Access
9.4 Filtering IP Addresses for Management Access
9.5 Configuring Port Isolation
9.6 Configuring 802.1x Port Authentication
9.1 AAA
The Authentication, authorization feature provides the main framework for configuring access
control on the switch. The two security functions can be summarized as follows:
z
Authentication — Identifies users that request access to the network.
z
Authorization — Determines if users can access specific services.
To configure AAA on the switch, you need to follow this general process:
z
Configure RADIUS server access parameters.
z
Define RADIUS server to support the accounting and authorization of services.
This guide assumes that RADIUS servers have already been configured to support AAA. The
configuration of RADIUS server software is beyond the scope of this guide, refer to the
documentation provided with the RADIUS server software.