Operation Manual – AAA&RADIUS
Quidway S3100 Series Ethernet Switches
Chapter 1 AAA&RADIUS Configuration
Huawei Technologies Proprietary
1-17
Caution:
z
After the
local-user password-display-mode cipher-force
command is executed,
all passwords will be displayed in cipher mode even through you specify to display
user passwords in plain text by using the
password
command.
z
If the configured authentication method (local or RADIUS) requires a user name and
a password, the command level that a user can access after login is determined by
the priority level of the user. For SSH users, when they use RSA shared keys for
authentication, the commands they can access are determined by the levels set on
their user interfaces.
z
If the configured authentication method is none or requires a password, the
command level that a user can access after login is determined by the level of the
user interface.
1.4.3 Cutting Down User Connection Forcibly
Table 1-10
Cut down user connection forcibly
Operation
Command
Description
Enter system view
system-view
—
Cut down user
connections
forcibly
cut connection
{
all
|
access-type
{
dot1x
|
mac-authentication
} |
domain domain-name
|
interface
interface-type interface-number
|
ip
ip-address
|
mac mac-address
|
radius-scheme
radius-scheme-name
|
vlan
vlan-id
|
ucibindex ucib-index
|
user-name user-name
}
Required
1.5 RADIUS Configuration
The RADIUS protocol configuration is performed on a RADIUS scheme basis. In an
actual network environment, you can either use a single RADIUS server or two
RADIUS servers (primary and secondary servers with the same configuration but
different IP addresses) in a RADIUS scheme. After creating a new RADIUS scheme,
you should configure the IP address and UDP port number of each RADIUS server you
want to use in this scheme. These RADIUS servers fall into two types:
authentication/authorization, and accounting. And for each kind of server, you can
configure two servers in a RADIUS scheme: primary server and secondary server. A
RADIUS scheme has the following attributes: IP addresses of the primary and
secondary servers, shared keys, and types of the RADIUS servers.
