1-22Displaying and Maintaining AAATo do… Use the command… RemarksDisplay the configurationinformation of a specified ISPdomain or all ISP domainsdisplay domain [ isp-name ] Available in any viewDisplay information aboutspecified or all user connectionsdisplay connection [access-type{ dot1x | mac-authentication } |domain isp-name | interfaceinterface-type interface-number | ipip-address | mac mac-address |ucibindex ucib-index | user-nameuser-name | vlan vlan-id ] [ slotslot-number ]Available in any viewDisplay information aboutspecified or all local usersdisplay local-user [ idle-cut{ disable | enable } | service-type{ ftp | lan-access | ssh | telnet |terminal } | state { active | block } |user-name user-name | vlanvlan-id ] [ slot slot-number ]Available in any viewDisplay configuration informationabout a specified user group or alluser groupsdisplay user-group [ group-name ] Available in any viewConfiguring RADIUSThe RADIUS protocol is configured on a per scheme basis. After creating a RADIUS scheme, you needto configure the IP addresses and UDP ports of the RADIUS servers for the scheme. The serversinclude authentication/authorization servers and accounting servers, or primary servers and secondaryservers. In other words, the attributes of a RADIUS scheme mainly include IP addresses of primary andsecondary servers, shared key, and RADIUS server type.Actually, the RADIUS protocol configurations only set the parameters necessary for the informationinteraction between a NAS and a RADIUS server. For these settings to take effect, you must referencethe RADIUS scheme containing those settings in ISP domain view. For information about thecommands for referencing a scheme, refer to Configuring AAA.When there are users online, you cannot modify RADIUS parameters other than the retransmissionones and the timers.Creating a RADIUS SchemeBefore performing other RADIUS configurations, follow these steps to create a RADIUS scheme andenter RADIUS scheme view:
