
38
Displaying and maintaining AAA
To do…
Use the command…
Remarks
1.
Display the configuration
information of a specified ISP
domain or all ISP domains
display domain
[
isp-name
]
Available in any view
2.
Display information about
specified or all user
connections (standalone mode)
display
connection
[
domain
isp-name
|
ucibindex
ucib-index
|
user-name
user-
name
] [
slot
slot-number
]
Available in any view
3.
Display information about
specified or all user
connections (IRF mode)
display
connection
[
domain
isp-name
|
ucibindex
ucib-index
|
user-name
user-
name
] [
chassis
chassis-number
slot
slot-
number
]
Available in any view
4.
Display information about
specified or all local users
(standalone mode)
display local-user
[
service-type
{
ftp
|
lan-access
|
portal
|
ssh
|
telnet
|
terminal
} |
state
{
active
|
block
} |
user-name
user-name
|
vlan
vlan-id
] [
slot
slot-number
]
Available in any view
5.
Display information about
specified or all local users (IRF
mode)
display
connection
[
domain
isp-name
|
ucibindex
ucib-index
|
user-name
user-
name
] [
chassis
chassis-number
slot
slot-
number
]
Available in any view
6.
Display configuration
information about a specified
user group or all user groups
display user-group
[
group-name
]
Available in any view
Configuring RADIUS
The RADIUS protocol is configured on a per scheme basis. After creating a RADIUS scheme, you
must configure the IP addresses and UDP ports of the RADIUS servers and the shared keys for the
scheme. The servers include authentication/authorization servers and accounting servers, or
primary servers and secondary servers. In other words, the attributes of a RADIUS scheme include
IP addresses of primary and secondary servers, shared key, and RADIUS server type.
The RADIUS protocol configurations set only the parameters necessary for the interaction between
a NAS and a RADIUS server. You must reference the RADIUS scheme containing those settings in
the ISP domain view for the settings to take effect. For information about the commands for
.
You can modify only the transmission, timer, and RADIUS server parameters if there are users online.
Creating a RADIUS scheme
Before performing other RADIUS configurations, follow these steps to create a RADIUS scheme
and enter RADIUS scheme view: