Operation Manual - Security
Quidway S6500 Series Ethernet Switches
Chapter 2 AAA and RADIUS Protocol
Configuration
Huawei Technologies Proprietary
2-27
Operation Command
Delete the stopping accounting
requests saved in buffer without
response
reset stop-accounting-buffer
{ radius-scheme radius-scheme-name |
session-id session-id | time-range
start-time stop-time | user-name
user-name }
Reset the statistics of RADIUS server
reset radius statistics
Enable RADIUS packet debugging
debugging radius packet
Disable RADIUS packet debugging
undo debugging radius packet
Enable debugging of local RADIUS
authentication server
debugging local-server { all | error |
event | packet }
Disable debugging of local RADIUS
authentication server
undo debugging local-server { all | error
| event | packet }
2.5 AAA and RADIUS Protocol Configuration Example
For the hybrid configuration example of AAA/RADIUS protocol and 802.1x protocol,
refer to Configuration Example in 802.1x Configuration. It will not be detailed here.
2.5.1 Configuring the FTP/Telnet User Authentication at a Remote RADIUS
Server
Note:
Configuring Telnet user authentication at the remote server is similar to configuring
FTP users. The following description is based on Telnet users.
I. Networking requirements
In the environment as illustrated in the following figure, it is required to achieve through
proper configuration that the RADIUS server authenticates the Telnet users to be
registered.
One RADIUS server (as authentication server) is connected to the switch and the
server IP address is 10.110.91.164. The key for exchanging messages between the
switch and the authentication server is "expert”. The switch sends the username
without domain name.