Huawei Quidway S8500 Series, Руководство по управлению

Страница: 922 / 1341

Command Manual – Security
Quidway S8500 Series Routing Switches Chapter 2 AAA and RADIUS/HWTACACS Protocol
Configuration Commands
Huawei Technologies Proprietary
2-36
network. Only one nas-ip can be configured for each private network and a maximum of
16 private networks can be configured.
Use the
undo radius
nas-ip command to cancel the nas-ip configuration for global
public network. Use the
undo radius nas-ip vpn-instance
command to cancel the
nas-ip configuration for a private network.
Related command:
display radius nas-ip.
Example
# Configure the source IP address that the switch uses to send RADIUS packets as
129.10.10.1.
<Quidway>system-view
[Quidway] radius nas-ip 129.10.10.1
2.2.15 radius scheme
Syntax
radius scheme radius-server-name
undo radius scheme radius-server-name
View
System view
Parameter
radius-server-name
: Specifies the RADIUS scheme name with a character string not
exceeding 32 characters.
Description
Use the
radius scheme
command to configure a RADIUS scheme and enter its view.
Use the
undo radius scheme
command to delete the specified RADIUS scheme.
By default, RADIUS scheme named as system has been created in the system. The
attributes of system are all default values.
RADIUS protocol configuration is performed on a per-RADIUS-scheme basis. Every
RADIUS scheme shall at least have the specified IP address and UDP port number of
the RADIUS authentication/authorization/accounting server and some necessary
parameters exchanged with the RADIUS client end (switch system). So it is necessary
to create the RADIUS scheme and enter its view before performing other RADIUS
protocol configurations.
A RADIUS scheme can be used by several ISP domains at the same time. You can
configure up to 16 RADIUS schemes, including the default scheme named as system.