H3C Technologies H3C SecPath F1000-E - Manual (Page 192)

182
Verifying the configuration
After the configuration, the Telnet user should be able to Telnet to SecPath and use the configured
account (username hello@bbb and password abc) to enter the user interface of SecPath, and access all
commands of level 0 to level 3.
Configure RADIUS schemes at the CLI
RADIUS scheme configuration task list
Task Remarks
Creating a RADIUS scheme Required
Specifying the RADIUS authentication/authorization servers Required
Specifying the RADIUS accounting servers and the relevant parameters Optional
Specifying the shared keys for authenticating RADIUS packets Optional
Specifying a VPN for the RADIUS scheme Optional
Setting the supported RADIUS server type Optional
Setting the maximum number of RADIUS request transmission attempts Optional
Setting the status of RADIUS servers Optional
Setting the username format and traffic statistics units Optional
Specifying the source IP address for outgoing RADIUS packets Optional
Setting timers for controlling communication with RADIUS servers Optional
Configuring RADIUS accounting-on Optional
Configuring the IP address of the security policy server Optional
Configuring interpretation of RADIUS class attribute as CAR parameters Optional
Enabling the trap function for RADIUS Optional
Enabling the RADIUS listening port of the RADIUS client Optional
Displaying and maintaining RADIUS Optional
Creating a RADIUS scheme
Before performing other RADIUS configurations, follow these steps to create a RADIUS scheme and enter
RADIUS scheme view:
Step Command Remarks
1. Enter system view. system-view N/A
2. Create a RADIUS scheme and
enter RADIUS scheme view. radius scheme
radius-scheme-name No RADIUS scheme exists by
default.
NOTE:
A RADIUS scheme can be referenced by multiple ISP domains at the same time.