Huawei Quidway S6500 Series, Руководство по управлению

Страница: 593 / 845

Command Manual - Security
Quidway S6500 Series Ethernet Switches
Chapter 2 AAA Configuration Commands
Huawei Technologies Proprietary
2-27
For the related commands, see
reset stop-accounting-buffer
,
stop-accounting-buffer enable
,
retry stop-accounting
.
Example
# Display the stopping accounting requests saved in the system buffer since 0:0:0 to
23:59:59 on August 31, 2002.
<Quidway> display stop-accounting-buffer time-range 0:0:0-2002/08/31
23:59:59-2002/08/31
Total find 0 record
2.2.8 key
Syntax
key
{
accounting
|
authentication
}
string
undo key
{
accounting
|
authentication
}
View
RADIUS scheme view
Parameter
accounting
: Configures to set/delete the encryption key for RADIUS accounting
packet.
authentication
: Configures to set/delete the encryption key for RADIUS
authentication/authorization packet.
string
: Specifies the key with a character string not exceeding 16 characters. By default,
the key is “huawei”.
Description
Using
key
command, you can configure encryption key for RADIUS
authentication/authorization or accounting packet. Using
undo key
command, you can
restore the default key.
RADIUS client (switch system) and RADIUS server use MD5 algorithm to encrypt the
exchanged packets. The two ends verify the packet through setting the encryption key.
Only when the keys are identical can both ends accept the packets from each other and
give responses.
So it is necessary to ensure that the keys set on the switch and the
RADIUS server are identical. If the authentication/authorization and accounting are
performed on two different servers with different encryption keys, you are supposed to
set two encryption keys respectively.
For the related commands, see
primary accounting
,
primary authentication
,
radius
scheme