4. Run the quit command to return to the AAA mode.
Step 2 Create a domain.
NOTE
l A domain is a group of users of the same type.
l In the user name format userid@domain-name (for example, huawei20041028@huawei.net), "userid"
indicates the user name for authentication and "domain-name" followed by "@" indicates the domain name.
l The domain name for user login cannot exceed 15 characters, and the other domain names cannot exceed
20 characters.
1. In the AAA mode, run the domain command to create a domain.
Step 3 Refer the authentication scheme.
NOTE
You can refer an authentication scheme in a domain only after the authentication scheme is created.
1. In the domain mode, run the authentication-scheme command to reference the
authentication scheme.
2. Run the quit command to return to the AAA mode.
Step 4 Configure a local user.
In the AAA mode, run the local-user username service-type command to create a local AAA
user.
----End
Example
User1 in the isp domain adopts the local server for authentication. The authentication scheme is
newscheme, the password is a123456, do as follows:
huawei(config)#aaa
huawei(config-aaa)#authentication-scheme newscheme
Info: Create a new authentication scheme
huawei(config-aaa-authen-newscheme)#authentication-mode local
huawei(config-aaa-authen-newscheme)#quit
huawei(config-aaa)#domain isp
Info: Create a new domain
huawei(config-aaa-domain-isp)#authentication-scheme newscheme
huawei(config-aaa-domain-isp)#quit
huawei(config-aaa)#local-user user1@isp service-type terminal password a123456
2.4.2 Configuring the Remote AAA (RADIUS Protocol)
The MA5600T/MA5603T/MA5608T is interconnected with the RADIUS server through the
RADIUS protocol to implement authentication and accounting.
Context
l What is RADIUS:
– Radius is short for the remote authentication dial-in user service. It is a distributed
information interaction protocol with the client-server structure. Generally, it is used to
manage a large number of distributed dial-in users.
SmartAX MA5600T/MA5603T/MA5608T Multi-service
Access Module
Commissioning and Configuration Guide
2 Basic Configurations
Issue 01 (2014-04-30) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
228