H3C Technologies H3C MSR 50 - Manual (Page 361)

340
Figure 340 RADIUS server configuration
2. Configure the parameters, as described in Table 150 .
3. Click Apply.
You can repeat the above steps to configure multiple RADIUS servers for the RADIUS scheme.
Table 150 Configuration items
Item Description
Server Type
Select the type of the RADIUS server to be configured. Possible values include
primary authentication server, primary accounting server, secondary
authentication server, and secondary accounting server.
IP Address
Specify the IPv4 or IPv6 address of the RADIUS server.
The IP addresses of the primary and secondary servers for a scheme must be
different. Otherwise, the configuration fails.
RADIUS server addresses in the same scheme must use the same IP version.
Port Specify the UDP port of the RADIUS server.
Key
Confirm Key
Specify the shared key for communication with the RADIUS server.
If no shared key is specified, the shared key specified in the common configuration
part is used.
VPN
Specify the VPN to which the RADIUS server belongs.
If no VPN is specified, the VPN specified in the common configuration part is used.
RADIUS configuration example
Network requirements
• As shown in Figure 341 , connect the Telnet user to the router and the router to the RADIUS server.
• Run the RADIUS server on CAMS or IMC to provide authentication, authorization, and accounting
services for Telnet users. The IP address of the RADIUS server is 10.1.1.1/24.
• Set the shared key for AAA packets exchanged between the router and the RADIUS server to expert,
and specify the ports for authentication/authorization and accounting as 1812 and 1813,
respectively.
• Configure the router to send the RADIUS server usernames that carry domain names.