huawei(config-aaa-authen-newscheme)#
quit
huawei(config-aaa)#
accounting-scheme newscheme
huawei(config-aaa-accounting-newscheme)#
accounting-mode radius
huawei(config-aaa-accounting-newscheme)#
accounting interim interval 10
huawei(config-aaa-accounting-newscheme)#
quit
huawei(config)#
radius-server template hwtest
huawei(config-radius-hwtest)#
radius-server authentication 10.10.66.66 1812
huawei(config-radius-hwtest)#
radius-server authentication 10.10.66.67 1812
secondary
huawei(config-radius-hwtest)#
radius-server accounting 10.10.66.66 1813
huawei(config-radius-hwtest)#
radius-server accounting 10.10.66.67 1813 secondary
huawei(config-radius-hwtest)#
quit
huawei(config)#
aaa
huawei(config-aaa)#
domain isp
huawei(config-aaa-domain-isp)#
authentication-scheme newscheme
huawei(config-aaa-domain-isp)#
accounting-scheme newscheme
huawei(config-aaa-domain-isp)#
radius-server hwtest
huawei(config-aaa-domain-isp)#
quit
2.4.3 Configuration Example of the RADIUS Authentication and
Accounting
The MA5600T/MA5603T/MA5608T is interconnected with the RADIUS server through the
RADIUS protocol to implement authentication and accounting.
Service Requirements
l
The RADIUS server performs authentication and accounting for users in the ISP1 and ISP2
domains.
l
The RADIUS server with the IP address 10.10.66.66 functions as the primary server for
authentication and accounting.
l
The RADIUS server with the IP address 10.10.66.67 functions as the secondary server for
authentication and accounting.
l
The authentication port number is 1812, and the accounting port number is 1813.
l
Other parameters adopt the default settings.
Networking
shows an example network of the RADIUS Authentication and Accounting
application.
SmartAX MA5600T/MA5603T/MA5608T Multi-service
Access Module
Commissioning and Configuration Guide
2 Basic Configurations
Issue 01 (2014-04-30)
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
237