Operation Manual – AAA & RADIUS & HWTACACS & EADH3C S7500 Series Ethernet SwitchesChapter 1 AAA & RADIUS & HWTACACSConfiguration1-211.3.7 Cutting Down User ConnectionsTable 1-11 Cut down user connectionTo do... Use the command... RemarksEnter system view system-view —Cut down userconnections forciblycut connection { all | access-type { dot1x |mac-authentication } | domain isp-name |interface interface-type interface-number | ipip-address | mac mac-address |radius-scheme radius-scheme-name | vlanvlan-id | ucibindex ucib-index | user-nameuser-name }RequiredNote:z You can use the display connection command to display Telnet user connections,but cannot use the cut connection command to cut down their connections.z You can use neither the display connection command to display FTP or SFTPuser connections, nor the cut connection command to cut down their connections..1.4 RADIUS ConfigurationRADIUS protocol is configured scheme by scheme. In an actual network environment,you can either use a single RADIUS server or two RADIUS servers (primary andsecondary servers with the same configuration but different IP addresses) in a RADIUSscheme. After creating a new RADIUS scheme, you should configure the IP addressand UDP port number of each RADIUS server you want to use in this scheme. TheseRADIUS servers fall into two types: authentication/authorization, and accounting. Andfor each kind of server, you can configure two servers in a RADIUS scheme: primaryserver and secondary server. A RADIUS scheme has the following attributes: IPaddresses of the primary and secondary servers, shared keys, and types of theRADIUS servers.In an actual network environment, you can configure the above parameters as required.But you should configure at least one authentication/authorization server and oneaccounting server, and at the same time, you should keep the RADIUS service portsettings on the switch consistent with those on the RADIUS servers.
