huawei(config-aaa-authen-newscheme)#quit
huawei(config-aaa)#accounting-scheme newscheme
huawei(config-aaa-accounting-newscheme)#accounting-mode radius
huawei(config-aaa-accounting-newscheme)#accounting interim interval 10
huawei(config-aaa-accounting-newscheme)#quit
huawei(config)#radius-server template hwtest
huawei(config-radius-hwtest)#radius-server authentication 10.10.66.66 1812
huawei(config-radius-hwtest)#radius-server authentication 10.10.66.67 1812
secondary
huawei(config-radius-hwtest)#radius-server accounting 10.10.66.66 1813
huawei(config-radius-hwtest)#radius-server accounting 10.10.66.67 1813 secondary
huawei(config-radius-hwtest)#quit
huawei(config)#aaa
huawei(config-aaa)#domain isp
huawei(config-aaa-domain-isp)#authentication-scheme newscheme
huawei(config-aaa-domain-isp)#accounting-scheme newscheme
huawei(config-aaa-domain-isp)#radius-server hwtest
huawei(config-aaa-domain-isp)#quit
2.4.3 Configuration Example of the RADIUS Authentication and
Accounting
The MA5600T/MA5603T/MA5608T is interconnected with the RADIUS server through the
RADIUS protocol to implement authentication and accounting.
Service Requirements
l The RADIUS server performs authentication and accounting for users in the ISP1 and ISP2
domains.
l The RADIUS server with the IP address 10.10.66.66 functions as the primary server for
authentication and accounting.
l The RADIUS server with the IP address 10.10.66.67 functions as the secondary server for
authentication and accounting.
l The authentication port number is 1812, and the accounting port number is 1813.
l Other parameters adopt the default settings.
Networking
Figure 2-2 shows an example network of the RADIUS Authentication and Accounting
application.
SmartAX MA5600T/MA5603T/MA5608T Multi-service
Access Module
Commissioning and Configuration Guide 2 Basic Configurations
Issue 01 (2014-04-30) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
237