Huawei Quidway S3500 Series User Manual

Operation Manual - Security
Quidway S3500 Series Ethernet Switches Chapter 4 EAD Configuration
Huawei Technologies Proprietary
4-3
4.4 EAD Configuration Example
 Note:
For Telnet and FTP users, their remote server authentication can be configured in
similar ways. The following description uses the authentication configuration for Telnet
uses as example.
I. Network requirements
In the network environment as shown in Figure 4-2, make proper configuration on the
switch, so that the RADIUS server can implement authentication and the security policy
server can perform EAD control on Telnet users.
The configuration tasks are as follows:
z Connect the RADIUS authentication server to the switch and configure its IP
address as 10.110.91.164.
z Set the encryption password for exchanging packets with the RADIUS server to
“expert”.
z Configure the switch to forward packets to the RADIUS server after the user
domain name is removed from the user name.
z Configure the security policy server, with its IP address as 10.110.91.166.
z Configure the virus patch server, with its IP address as 10.110.91.168.
II. Network diagram
Telnet user
Security policy severs
(IP address: 10.110.91.168 )
Virus patch severs
Authentication severs
(IP address 10.110.91.164 )
InternetInternet
(IP address:10.110.91.166 )
Figure 4-2 Network diagram for EAD configuration

Huawei Quidway S3500 Series Specifications

General

Brand	Huawei
Model	Quidway S3500 Series
Category	Network Router
Language	English