beautypg.com

Configuring radius schemes, Radius scheme configuration task list – H3C Technologies H3C S7500E Series Switches User Manual

Page 36

background image

2-7

To do…

Use the command…

Remarks

Configure the authorization attributes for

the user group

authorization-attribute { acl

acl-number | callback-number

callback-number | idle-cut minute |

level level | user-profile profile-name |

vlan vlan-id | work-directory

directory-name } *

Optional

By default, no

authorization attribute is

configured for a user

group.

Displaying and maintaining local users and local user groups

To do…

Use the command…

Remarks

Display information about specified or all

local users on a distributed device

display local-user [ idle-cut { disable

| enable } | service-type { ftp |

lan-access | portal | ssh | telnet |

terminal } | state { active | block } |

user-name user-name | vlan vlan-id ]

[ slot slot-number ]

Available in any view

Display information about specified or all

local users on a distributed IRF member

device

display local-user [ idle-cut { disable

| enable } | service-type { ftp |

lan-access | portal | ssh | telnet |

terminal } | state { active | block } |

user-name user-name | vlan vlan-id ]

[ chassis chassis-number slot

slot-number ]

Available in any view

Display configuration information about a

specified user group or all user groups

display user-group [ group-name ]

Available in any view

Configuring RADIUS Schemes

A RADIUS scheme specifies the RADIUS servers that the device can cooperate with and defines a set

of parameters that the device uses to exchange information with the RADIUS servers. There may be

authentication/authorization servers and accounting servers, or primary servers and secondary

servers. The parameters mainly include the IP addresses of the servers, the shared keys, and the

RADIUS server type.

RADIUS scheme configuration task list

Task

Remarks

Creating a RADIUS scheme

Required

Specifying the RADIUS authentication/authorization servers

Required

Specifying the RADIUS accounting servers and relevant parameters

Optional

Setting the shared keys for RADIUS packets

Optional