54
[Router-radius-rad] primary authentication 10.1.1.1 1812
# Set the shared key for authenticating authentication packets to
expert
.
[Router-radius-rad] key authentication expert
# Specify the service type for the RADIUS server, which must be
extended
when the server runs iMC.
[Router-radius-rad] server-type extended
# Specify the scheme to include the domain names in usernames to be sent to the RADIUS server.
[Router-radius-rad] user-name-format with-domain
[Router-radius-rad] quit
# Configure the AAA methods for domain
bbb
. Because RADIUS authorization information is sent to the
RADIUS client in the authentication response messages, be sure to reference the same scheme for user
authentication and authorization.
[Router] domain bbb
[Router-isp-bbb] authentication login radius-scheme rad
[Router-isp-bbb] authorization login radius-scheme rad
[Router-isp-bbb] quit
# You can achieve the same result by configuring default AAA methods for all types of users in domain
bbb
.
[Router] domain bbb
[Router-isp-bbb] authentication default radius-scheme rad
[Router-isp-bbb] authorization default radius-scheme rad
[Router-isp-bbb] quit
3.
Verify the configuration.
After you complete the configuration, the Telnet user should be able to Telnet to the router, use the
configured account to enter the user interface of the router, and access all the commands of level 0 to
level 3.
# Use
display connection
to view the connection information on the router.
[Router] display connection
Index=1 ,Username=hello@bbb
IP=192.168.1.58
IPv6=N/A
Total 1 connection(s) matched.
Local authentication/authorization for Telnet/FTP users
Configuration of local authentication and authorization for FTP users is similar to that for Telnet users.
The following takes Telnet users as an example.
Network requirements
As shown in
, configure the router to perform local authentication and authorization for Telnet
users.
Figure 13
Configure local authentication/authorization for Telnet users
