H3C S5510 Series Command Manual

Also see for S3610 Series: Configuration Quick start Operation manual Operation manual Operation manual

Contents

H3C S5510 Series Command Manual Manual pdf 42 page image

Command Manual – AAA&RADIUS&HWTACACSH3C S3610&S5510 Series Ethernet SwitchesChapter 1 AAA & RADIUS & HWTACACSConfiguration Commands1-39when the switch serves as a RADIUS authentication server, it can support at most16 network access servers simultaneously to provide authentication.Related command: radius scheme and state.Example# Create a network access server granted by the RADIUS authentication server with anIP address of 10.110.1.2 and a shared key of aabbcc. system-viewSystem View: return to User View with Ctrl+Z.[Sysname] local-server nas-ip 10.110.1.2 key aabbcc1.2.8 local-server nas-ipSyntaxlocal-server nas-ip ip-address key passwordundo local-server nas-ip ip-addressViewSystem viewParameternas-ip ip-address: Sets the IP address, represented in dotted decimal notation, of thenetwork access server allowed by the local RADIUS server.key password: Sets the shared key, a string of up to 16 characters, of the local server.DescriptionUse the local-server nas-ip command to configure the related parameters of the localRADIUS server.Use the undo local-server nas-ip command to remove a local RADIUS serverconfigured.By default, the system has created a local RADIUS server with 127.0.0.1 as NAS-IPaddress and a null string as shared key.Note that:z When the local RADIUS authentication server function is used, the UDP portnumber used for authentication/authorization must be 1645 and that foraccounting must be 1646.z The shared key configured with this command and that configured with the key{ accounting | authentication } command in RADIUS scheme view forauthentication/authorization or accounting packets must be the same.z The device supports up to 16 local RADIUS authentication servers.