Ruijie RG-S2900G-E Series - Page 459

Configuration Guide AAA Configuration
Command
Function
username name [password
password]
Establish the local username and set the
password.
username name [privilege level]
Set the user privilege level. (Optional)
end
Return to the privileged mode.
show running-config
Confirm the configuration.
To define the local Enable authentication method list, run the following commands:
Command
Function
configure terminal
Enter the global configuration mode.
aaa new-model
Turn on the AAA switch.
aaa authentication enable default
local
Define the local method list.
end
Return to the privileged mode.
show aaa method-list
Confirm the configured method list.
configure terminal
Enter the global configuration mode.
show running-config
Confirm the configuration.
Using Radius for Enable authentication
The standard RADIUS server can pass the privilege level binded with the Service-Type
attribute(the standard attribute number is 6), can specify the privilege with 1 or 15 level. The
extened RADIUS server (for example, SAM) can configure the privilege level of the
administrator(the private attribute number is 42), can specify 0-15 privilege level. For the
details of the RADIUS server, see Specifying the RADIUS Private Attribute Type in
Configuring RADIUS.
To configure the use of RADIUS authentication server for enable authentication, it is required
to first configure the RADIUS server, then the RADIUS server-based enable authentication
method list. Run the following commands in the global configuration mode:
Command
Function
configure terminal
Enter the global configuration mode.
aaa new-model
Turn on the AAA switch.
aaa authentication enable default
group radius
Define RADIUS authentication method.
end
Return to the privileged mode.
show aaa method-list
Confirm the configured method list.
show running-config
Confirm the configuration.