Huawei Quidway S3000-EI Series - 2.3 Configuring RADIUS Protocol; 2.3.1 Creating;Deleting a RADIUS scheme

Operation Manual - Security
Quidway S3000-EI Series Ethernet Switches
Chapter 2 AAA and RADIUS Protocol
Configuration
Huawei Technologies Proprietary
2-10
tc.
interaction between NAS and RADIUS Server. To make these
a
RAD
conf
z
z
z
n key
Setting response timeout timer of RADIUS server
z Setting retransmission times of RADIUS request packet
ng the selection of RADIUS accounting option
z
z
z
z
z
z
r
z Setting local RADIUS authentication server
mong the above tasks, creating RADIUS scheme and setting IP address of RADIUS
rformed as per your
2.3.1 Crea
col configurations are performed on the per
ng other RADIUS protocol
configurations, it is compulsory to create the RADIUS scheme and enter its view to set
its IP address.
You can use the following commands to create/delete a RADIUS scheme.
Perform the following configurations in system view.
2.3 Configuring RADIUS Protocol
For the Quidway Series Switches, the RADIUS protocol is configured on the per
RADIUS scheme basis. In real networking environment, a RADIUS scheme can be an
independent RADIUS server or a set of primary/second RADIUS servers with the same
configuration but two different IP addresses. Accordingly, attributes of every RADIUS
scheme include IP addresses of primary and second servers, shared key and RADIUS
server type e
Actually, RADIUS protocol configuration only defines some necessary parameters
using for information
par meters effective, it is necessary to configure, in the view, an ISP domain to use the
IUS scheme and specify it to use RADIUS AAA schemes. For more about the
iguration commands, refer to the AAA Configuration section above.
RADIUS protocol configuration includes:
Creating/Deleting a RADIUS scheme
Setting IP Address and Port Number of RADIUS Server
Setting RADIUS packet encryptio
z
z Enabli
z Setting a real-time accounting interval
Setting maximum times of real-time accounting request failing to be responded
Enabling/Disabling stopping accounting request buffer
z Setting the maximum retransmitting times of stopping accounting request
Setting the Supported Type of RADIUS Server
Setting RADIUS server state
Setting username format transmitted to RADIUS server
Setting the unit of data flow that transmitted to RADIUS serve
A
server are required, while other takes are optional and can be pe
requirements.
ting/Deleting a RADIUS scheme
As mentioned above, RADIUS proto
RADIUS scheme basis. Therefore, before performi