Ruijie RG-S2900G-E Series, Configuration Manual

Page: 459 / 943

Configuration Guide AAA Configuration
Command Function
username name [ password
password ]
Establish the local username and set the
password.
username name [ privilege level ] Set the user privilege level. (Optional)
end Return to the privileged mode.
show running-config Confirm the configuration.
To define the local Enable authentication method list, run the following commands:
Command Function
configure terminal Enter the global configuration mode.
aaa new-model Turn on the AAA switch.
aaa authentication enable default
local
Define the local method list.
end Return to the privileged mode.
show aaa method-list Confirm the configured method list.
configure terminal Enter the global configuration mode.
show running-config Confirm the configuration.
Using Radius for Enable authentication
The standard RADIUS server can pass the privilege level binded with the Service-Type
attribute(the standard attribute number is 6), can specify the privilege with 1 or 15 level. The
extened RADIUS server (for example, SAM) can configure the privilege level of the
administrator(the private attribute number is 42), can specify 0-15 privilege level. For the
details of the RADIUS server, see Specifying the RADIUS Private Attribute Type in
Configuring RADIUS .
To configure the use of RADIUS authentication server for enable authentication, it is required
to first configure the RADIUS server, then the RADIUS server-based enable authentication
method list. Run the following commands in the global configuration mode:
Command Function
configure terminal Enter the global configuration mode.
aaa new-model Turn on the AAA switch.
aaa authentication enable default
group radius
Define RADIUS authentication method.
end Return to the privileged mode.
show aaa method-list Confirm the configured method list.
show running-config Confirm the configuration.