Ruijie RG-S2900G-E Series, Руководство по настройке

Страница: 467 / 943

Configuration Guide AAA Configuration
Ruijie(config-line)# login authentication mlist1
Ruijie(config-line)# authorization exec mlist2
Ruijie(config-line)# end
Ruijie(config)# show running-config
!
aaa new-model
!
aaa authorization lexec mlist2 group radius local
aaa authentication login mlist1 local
!
username Ruijie password Ruijie
username Ruijie privilege 6
!
Radius-server host 192.168.217.64
radius-server key 7 093b100133
!
line con 0
line vty 0 4
authorization exec mliat2
login authentication mlist1
!
end
Configuring AAA Network Authorization
Our product support the network authorization over the network connection including PPP,
SLIP. The network authorization makes the network connection obtain the service like traffic,
bandwidth, timeout, ect. The network authorization only support the RADIUS. The
authorization information assigned from the server are encapsulated in the RADIUS attribute.
For different network connection application, it is possible that these authorization information
are different.
Caution
Now the configuration does not support the 802.1X AAA authorization, while
the 802.1X is implemented by using other commands. For the details of the
802.1X authorization, see Configuring 802.1X .
To configure the AAA network authorization, run the following commands in the global
configuration mode:
Command Function
configure terminal Enter the global configuration mode.
aaa new-model Turn on the AAA switch.
aaa authorization network { default |
list-
name} method1 [method2|…
]
Define the AAA network authorization method. If
you need to define multiple methods, execute
this command repeatedly.
The keyword "list-name" is used to name the created authorization method list, which can be
any string. The keyword "method" means the actual algorithm for authorization. Only when the
current method returns ERROR (no reply), the next authorization method will be attempted. If