Operation Manual – AAA & RADIUS & HWTACACS & EAD
Quidway S5600 Series Ethernet Switches-Release 1510
Chapter 1 AAA & RADIUS & HWTACACS
Configuration
Huawei Technologies Proprietary
1-20
Caution:
z
In string mode, if the VLAN ID assigned by the RADIUS server is a character string
containing only digits (for example, 1024), the switch first regards it as an integer
VLAN ID: the switch transforms the string to an integer value and judges if the value
is in the valid VLAN ID range; if it is, the switch adds the authenticated port to the
VLAN with the integer value as the VLAN ID (VLAN 1024, for example).
z
To implement dynamic VLAN assignment on a port where both MSTP and 802.1x
are enabled, you must set the MSTP port to an edge port.
1.3.6 Configuring the Attributes of a Local User
When
local
scheme is chosen as the AAA scheme, you should create local users on
the switch and configure the relevant attributes.
The local users are users set on the switch, with each user uniquely identified by a user
name. To make a user who is requesting network service pass through the local
authentication, you should add an entry in the local user database on the switch for the
user.
Table 1-10
Configure the attributes of a local user
Operation
Command
Description
Enter system view
system-view
—
Add a local user and enter
local user view
local-user user-name
Required
By default, there is no local
user in the system.
Set a password for the
specified user
password
{
simple
|
cipher
}
password
Optional
Set the password display
mode of all local users
local-user
password-display-m
ode
{
cipher-force
|
auto
}
Optional
By default, the password
display mode of all access
users is
auto
, indicating the
passwords of access users
are displayed in the modes
set with the
password
command.
Set the state of the
specified user
state
{
active
|
block
}
Optional
By default, the local users
are in the
active
state once
they are created, that is,
they are allowed to request
network services.
