3Com MSR 50 Series, Руководство по настройке

Страница: 1776 / 2443

1776 C
HAPTER
93: AAA/RADIUS/HWTACACS C
ONFIGURATION
n
If the system has no authentication scheme enabled with the accounting-on
function when you execute the
accounting-on enable command, you need to
save the configuration and restart the device so that the command takes effect.
Otherwise, the command takes effect immediately.
Configuring an IP
Address for the Security
Policy Server
For a enabled device, a security policy server is necessary for security check
of users accessing the network through the device. The security policy server
determines whether a user can access the intended network resources.
For details about , refer to “Portal Configuration” on page 1851 .
Follow these steps to configure an IP address for the security policy server:
n
■
If more than one interface of the device is enabled with Portal, the interfaces
may use different security policy servers. You can specify up to eight security
policy servers for a RADIUS scheme.
■
If the RADIUS server and the security policy server reside on the same physical
device, you do not need to configure the IP address of the security policy
server.
■
The specified security policy server must be a security policy server or RADIUS
server that is correctly configured and working normally. Otherwise, the device
will regard it as an illegal server.
Enabling the Listening
Port of the RADIUS
Client
Follow these steps to enable the listening port of the RADIUS client. With the
listening port enabled, the RADIUS client can send and receive RADIUS packets
through the port.
To do... Use the command... Remarks
Enter system view system-view -
Create RADIUS scheme and
enter its view radius scheme
radius-scheme-name
Required
By default, no RADIUS scheme
is defined.
Enable accounting-on accounting-on enable Required
Disabled by default
Set the number of
accounting-on packet
retransmission attempts accounting-on enable send
send-times
Optional
5 times by default
Set the retransmission interval
of accounting-on packets accounting-on enable
interval
seconds
Optional
3 seconds by default
To do... Use the command... Remarks
Enter system view system-view -
Create RADIUS scheme
and enter its view radius scheme
radius-scheme-name
Required
By default, no RADIUS scheme is
defined.
Configure an IP address
for the security policy
server security-policy-server
ip-address
Optional
By default, no IP address is configured
for the security policy server.