Huawei Quidway S3500 Series User Manual

Operation Manual - Security
Quidway S3500 Series Ethernet Switches Chapter 3 AAA and RADIUS Protocol Configuration
Huawei Technologies Proprietary
3-4
Quidway Series Switches ISP domain view, you can configure a complete set of
exclusive ISP domain attributes on a per-ISP domain basis, which includes AAA policy
( RADIUS scheme applied etc.)
For Quidway Series Switches, each supplicant belongs to an ISP domain. Up to 16
domains can be configured in the system. If a user has not reported its ISP domain
name, the system will put it into the default domain.
Perform the following configurations in system view.
Table 3-1 Creating/Deleting ISP domain
Operation Command
Create ISP domain or enter the view of a specified
domain.
domain isp-name
Remove a specified ISP domain
undo domain isp-name
Enable the default ISP domain specified by isp-name
domain default enable
isp-name
Restore the default ISP domain to “system”
domain default disable
By default, a domain named “system” has been created in the system. The attributes of
“system” are all default values.
3.2.2 Configuring Relevant Attributes of ISP Domain
The relevant attributes of ISP domain include the adopted RADIUS scheme, state, and
maximum number of supplicants . Where,
z The adopted RADIUS scheme is the one used by all the users in the ISP domain.
The RADIUS scheme can be used for RADIUS authentication or accounting. By
default, the default RADIUS scheme is used. The command shall be used
together with the commands of setting RADIUS server and server cluster. For
details, refer to the following Configuring RADIUS section of this chapter.
z Every ISP has active/block states. If an ISP domain is in active state, the users in it
can request for network service, while in block state, its users cannot request for
any network service, which will not affect the users already online. An ISP is in the
block state when it is created. No user in the domain is allowed to request for
network service.
z Maximum number of supplicants specifies how many supplicants can be
contained in the ISP. For any ISP domain, there is no limit to the number of
supplicants by default.
z The idle cut function means: If the traffic from a certain connection is lower than
the defined traffic, cut off this connection.
z Perform the following configurations in ISP domain view.

Huawei Quidway S3500 Series Specifications

General

Brand	Huawei
Model	Quidway S3500 Series
Category	Network Router
Language	English