Operation Manual – AAA & RADIUS & HWTACACS & EADH3C S7500 Series Ethernet SwitchesChapter 1 AAA & RADIUS & HWTACACSConfiguration1-42III. Configuration procedure# Enter system view. system-view[H3C]# Adopt AAA authentication for Telnet users.[H3C] user-interface vty 0 4[H3C-ui-vty0-4] authentication-mode scheme# Configure an ISP domain.[H3C] domain cams[H3C-isp-cams] access-limit enable 10[H3C-isp-cams] quit# Configure a RADIUS scheme.[H3C] radius scheme cams[H3C-radius-cams] accounting optional[H3C-radius-cams] primary authentication 10.110.91.164 1812[H3C-radius-cams] key authentication expert[H3C-radius-cams] server-type extended[H3C-radius-cams] user-name-format with-domain[H3C-radius-cams] quit# Associate the ISP domain with the RADIUS scheme.[H3C] domain cams[H3C-isp-cams] scheme radius-scheme camsA Telnet user logging into the switch by a name in the format of userid @cams belongsto the cams domain and will be authenticated according to the configuration of thecams domain.1.7.2 Local Authentication of FTP/Telnet UsersNote:The configuration procedure for the local authentication of FTP users is similar to that ofTelnet users. The following description only takes the local authentication of Telnetusers as example.I. Network requirementsIn the network environment shown in Figure 1-8, the switch needs to be configured sothat the Telnet users logging into the switch are authenticated locally.
