Huawei Quidway S3900 Series - Page 499

Operation Manual – AAA & RADIUS & HWTACACS & EAD
Quidway S3900 Series Ethernet Switches-Release 1510
Chapter 1 AAA & RADIUS & HWTACACS
Configuration
Huawei Technologies Proprietary
1-18
Authorization: none.
Accounting: RADIUS or none.
You can configure combined authentication, authorization and accounting schemes by
using the above implementations.
z For FTP users
Only authentication is supported for FTP users.
Authentication: RADIUS, local, or RADIUS-local.
Perform the following configuration in ISP domain view.
Table 1-8 Configure separate AAA schemes
Operation Command Description
Enter system view
system-view
—
Create an ISP domain or
enter the view of an
existing ISP domain
domain isp-name
Required
Configure an
authentication scheme
for the ISP domain
authentication
{ radius-scheme
radius-scheme-name [ local ] |
hwtacacs-scheme
hwtacacs-scheme-name [ local ]
| local | none }
Optional
By default, no
separate
authentication
scheme is
configured.
Configure an
authorization scheme for
the ISP domain
authorization { none |
hwtacacs-scheme
hwtacacs-scheme-name }
Optional
By default, no
separate
authorization
scheme is
configured.
Configure an accounting
scheme for the ISP
domain
accounting { none |
radius-scheme
radius-scheme-name |
hwtacacs-scheme
hwtacacs-scheme-name }
Optional
By default, no
separate
accounting scheme
is configured.