Operation Manual – AAA&RADIUS
Quidway S3100 Series Ethernet Switches
Chapter 1 AAA&RADIUS Configuration
Huawei Technologies Proprietary
1-29
Note:
The switch can automatically generate the main attributes (NAS-ID, NAS-IP address
and session ID) in the Accounting-On packets. However, you can also manually
configure the NAS-IP address with the
nas-ip
command. If you choose to manually
configure the attribute, be sure to configure an appropriate and legal IP address. If this
attribute is not configured, the switch will automatically use the IP address of the VLAN
interface as the NAS-IP address.
Table 1-22
Enable the user re-authentication upon device restart function
Operation
Command
Description
Enter system view
system-view
—
Enter RADIUS
scheme view
radius scheme
radius-scheme-name
—
Enable the user
re-authentication
upon device restart
function
accounting-on
enable
[
send
times
|
interval interval
]
By default, this function is
disabled, and the system can
send at most 15 Accounting-On
packets consecutively at intervals
of three seconds.
1.6 Displaying AAA&RADIUS Information
After the above configurations, you can execute the
display
commands in any view to
view the operation of AAA and RADIUS and verify your configuration.
You can use the
reset
command in user view to clear the corresponding statistics.
Table 1-23
Display AAA information
Operation
Command
Display the configuration
information about one specific or
all ISP domains
display domain
[
isp-name
]
Display the information about
specified or all user connections
display
connection
[
access-type
{
dot1x
|
mac-authentication
} |
domain
isp-name
|
interface interface-type interface-number
|
ip
ip-address
|
mac
mac-address
|
radius-scheme radius-scheme-name
|
vlan
vlan-id
|
ucibindex ucib-index
|
user-name
user-name
]
