Huawei Quidway S3100 Series User Manual

Operation Manual – AAA&RADIUS
Quidway S3100 Series Ethernet Switches Chapter 1
AAA&RADIUS Configuration
Huawei Technologies Proprietary
1-13
II. Configuring separate AAA schemes
You can use the authentication, authorization, and accounting commands to
specify a scheme for each of the three AAA functions (authentication, authorization and
accounting) respectively. The following gives the implementations of this separate way
for the services supported by AAA.
z For terminal users
Authentication: RADIUS, local, RADIUS-local or none.
Authorization: none.
Accounting: RADIUS or none.
You can configure combined authentication, authorization and accounting schemes by
using the above implementations.
z For FTP users
Only authentication is supported for FTP users.
Authentication: RADIUS, local, or RADIUS-local.
Perform the following configuration in ISP domain view.
Table 1-7 Configure separate AAA schemes
Operation Command Description
Enter system view
system-view
—
Create an ISP domain or
enter the view of an
existing ISP domain
domain isp-name
Required
Configure an
authentication scheme
for the ISP domain
authentication
{ radius-scheme
radius-scheme-name [ local ] |
local | none }
Optional
By default, no
separate
authentication
scheme is
configured.
Allow users in current
ISP domain to access
the network services
without being authorized
authorization none
Optional
By default, no
separate
authorization
scheme is
configured.
Configure an accounting
scheme for the ISP
domain
accounting { none |
radius-scheme
radius-scheme-name }
Optional
By default, no
separate
accounting scheme
is configured.

Huawei Quidway S3100 Series Specifications

General

Brand	Huawei
Model	Quidway S3100 Series
Category	Switch
Language	English