Huawei Quidway S3000-EI Series User Manual

Operation Manual - Security
Quidway S3000-EI Series Ethernet Switches
Chapter 2 AAA and RADIUS Protocol
Configuration
Huawei Technologies Proprietary
2-23
2.5.2 Configuring FTP/Telnet User Authentication at Local RADIUS Server
L f
authentication. But you should modify the server IP address to 127.0.0.1,
uthentication password to Huawei, the UDP port number of the authentication server
ocal RADIUS authentication o Telnet/FTP users is similar to remote RADIUS
a
to 1645.
 Note:
For details about local RADIUS authentication of Telnet/FTP users, refer to “2.3.15
Configuring Local RADIUS Authentication Server”.
2.5.3 Configuring Dynamic VLAN with RADIUS Server
I.
sting VLAN ID “test”,
which corresponds to the name of VLAN 100 on the switch. The switch can add the port
VLAN 100 when the server delivers "test".
II
[Quidway-radius-ias] key accounting hello
[Quidway-radius-ias] quit
2) Create ISP domain
[Quidway] domain ias
[Quidway-isp-ias] scheme radius-scheme ias
3) Configure VLAN delivery mode as string
[Quidway-isp-ias] vlan-assignment-mode string
[Quidway-isp-ias] quit
4) Create a VLAN and specify its name.
# Create a VLAN.
[Quidway] vlan 100
Networking Requirements
The RADIUS server (taking Windows IAS as example) delivers
to
II. Networking diagram
See Figure 2-2.
I. Configuration procedure
1) Specify RADIUS scheme
[Quidway] radius scheme ias
[Quidway-radius-ias] primary authentication 10.11.1.1
[Quidway-radius-ias] primary accounting 10.11.1.2
[Quidway-radius-ias] key authentication hello

Huawei Quidway S3000-EI Series Specifications

General

Brand	Huawei
Model	Quidway S3000-EI Series
Category	Switch
Language	English