Huawei Quidway S3100 Series User Manual

Operation Manual – AAA&RADIUS
Quidway S3100 Series Ethernet Switches Chapter 1
AAA&RADIUS Configuration
Huawei Technologies Proprietary
1-12
implemented by the RADIUS server specified in the RADIUS scheme. In this way, you
can specify only one scheme to implement all the three AAA functions and do not need
to specify different schemes for authentication, authorization and accounting
respectively.
Table 1-6 Configure a bound AAA scheme
Operation Command Description
Enter system view
system-view
—
Create an ISP domain
or enter the view of an
existing ISP domain
domain isp-name
Required
Configure an AAA
scheme for the ISP
domain
scheme { local | none |
radius-scheme
radius-scheme-name [ local ] }
Required
By default, the ISP
domain uses the
local AAA
scheme.
Configure an RADIUS
scheme for the ISP
domain
radius-scheme
radius-scheme-name
Optional
This command has
the same effect as
the scheme
radius-scheme
command.
Caution:
z You can execute the scheme command with the radius-scheme-name argument to
adopt an already configured RADIUS scheme to implement all the three AAA
functions. If you adopt the local scheme, only the authentication and authorization
functions are implemented, the accounting function cannot be implemented.
z If you execute the scheme radius-scheme radius-scheme-name local command,
the local scheme becomes the secondary scheme in case the RADIUS server does
not response normally. That is, if the communication between the switch and the
RADIUS server is normal, no local authentication is performed; otherwise, local
authentication is performed.
z If you execute the scheme local command, the local scheme is adopted as the
primary scheme. In this case, only local authentication is performed, no RADIUS
authentication is performed.
z If you execute the scheme none command, no authentication is performed.

Huawei Quidway S3100 Series Specifications

General

Brand	Huawei
Model	Quidway S3100 Series
Category	Switch
Language	English