Ruijie RG-S2900G-E Series, Configuration Manual

Page: 468 / 943

Configuration Guide AAA Configuration
the current method returns FAIL, no authorization method will be used any more. To make the
authorization return successfully, even if no specified methods reply, it is possible to specific
"none" as the last authorization method.
Using Radius for network authorization
To configure the use of RADIUS server for network authorization, it is required to first configure
the RADIUS server. For the details of the RADIUS server configuration, see Configuring
RADIUS .
After configuring the RADIUS server, the RADIUS server-based method list can be configured.
Run the following commands in the global configuration mode:
Command Function
configure terminal Enter the global configuration mode.
aaa new-model Turn on the AAA switch.
aaa authentication network
{ default |
list-name }
group radius
Define RADIUS authentication method.
Example of Configuring Network Authorization
The example below illustrates how to configure network authorization.
Ruijie# configure terminal
Ruijie(config)# aaa new-model
Ruijie(config)# radius-server host 192.168.217.64
Ruijie(config)# radius-server key test
Ruijie(config)# aaa authorization network test group radius local
Ruijie(config-line)# end
Ruijie(config)# show running-config
!
aaa new-model
!
aaa authorization network test group radius none
!
radius-server host 192.168.217.64
radius-server key 7 093b100133
!
Configuring Accounting
The AAA accounting function enables you to trace the services and network resources used by
the user. After the accounting function is enabled, the network access server or router sends
the user's network accesses to the Radius security server by means of attribute pair. You may
use some analysis software to analyze these data to implement the billing, audition and tracing
function for the user's activities.