l
The RADIUS server with the IP address 129.7.66.67 functions as the secondary server for
authentication.
l
The authentication port ID is 1812.
l
Other parameters adopt the default settings.
Networking
shows the example network of RADIUS authentication.
Figure 3-31
Example network of RADIUS authentication
RADIUS server
(Master)
129.7.66.66
MA5600T
RADIUS server
(Backup)
129.7.66.67
user1@isp1
user2@isp2
user3@isp3
MA5616
Procedure
Step 1
Configure the authentication scheme.
Configure authentication scheme named
login-auth
(users are authenticated through RADIUS
protocol).
huawei(config)#
aaa
huawei(config-aaa)#
authentication-scheme login-auth
huawei(config-aaa-authen-login-auth)#
authentication-mode radius
huawei(config-aaa-authen-login-auth)#
quit
huawei(config-aaa)#
quit
Step 2
Configure the RADIUS protocol.
Create RADIUS server template named
test-login
with RADIUS server 129.7.66.66 as the
primary authentication server, and RADIUS server 129.7.66.67 as the secondary authentication
server.
huawei(config)#
radius-server template test-login
huawei(config-radius-test-login)#
radius-server authentication 129.7.66.66 1812
huawei(config-radius-test-login)#
radius-server authentication 129.7.66.67 1812
secondary
huawei(config-radius-test-login)#
quit
SmartAX MA5616 Multi-service Access Module
Configuration Guide
3 Basic Configuration
Issue 04 (2011-10-30)
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
105