Operation Manual - Security
Quidway S3000 Series Ethernet Switches
Chapter 2 AAA and RADIUS Protocol Configuration
2-17
Operation
Command
Display the configuration information of
all the RADIUS server groups or a
specified one
display radius
[
radius-server-name
]
Display the statistics information of
RADIUS packets
display radius statistics
Display the stopping accounting
requests saved in buffer without
response (from system view)
display stop-accounting-buffer
{
radius-scheme
radius-scheme-name
|
session-id
session-id
|
time-range
start-time stop-time
|
user-name
user-name
}
Delete the stopping accounting
requests saved in buffer without
response (from system view)
reset stop-accounting-buffer
{
radius-scheme
radius-scheme-name
|
session-id
session-id
|
time-range
start-time
stop-time
|
user-name
user-name
}
Enable RADIUS packet debugging
debugging radius packet
Disable RADIUS packet debugging
undo debugging radius packet
Enable debugging of localRADIUS
server group
debugging local-server
{
all
|
error
|
event
|
packet
}
Disable debugging of localRADIUS
server group
undo debugging local-server
{
all
|
error
|
event
|
packet
}
2.5 AAA and RADIUS Protocol Configuration Examples
For the hybrid configuration example of AAA/RADIUS protocol and 802.1x protocol,
refer to Configuration Example in 802.1x Configuration. It will not be detailed here.
2.5.1 Configuring FTP/Telnet User Authentication at Remote RADIUS Server
Note:
Configuring Telnet user authentication at the remote server is similar to configuring FTP users. The
following description is based on Telnet users.
I. Networking Requirements
In the environment as illustrated in the following figure, it is required to achieve through
proper configuration that the RADIUS server authenticates the Telnet users to be
registered.
One RADIUS server (as authentication server) is connected to the switch and the
server IP address is 10.110.91.146. The password for exchanging messages between
the switch and the authentication server is "expert”. The switch cuts off domain name
from username and sends the left part to the RADIUS server.
