H3C Technologies H3C Intelligent Management Center - Manual (Page 194)

184
4. If the security template requires the VAM server to authenticate VAM clients, enter the ISP domain
name in the ISP Domain Name field, and select an AAA authentication method from the AAA
Authentication list.
The following AAA authentication methods are available:
{
RADIUS—Use a RADIUS server (for example, IMC UAM) to authenticate VAM clients. If you
select RADIUS, you need to complete the following settings:
− Policy Name—Enter the name of the RADIUS scheme.
− AuthN/AuthZ Server IP—Enter the IP address of the authentication/authorization server.
− AuthN/AuthZ Server Port—Enter the port of the authentication/authorization server. The
default port is 1812.
− Password Type—Select the Plaintext or Ciphertext format for the AuthN/AuthZ Key.
− AuthN/AuthZ Key—Enter the key that the VAM server uses to communicate with the
authentication/authorization server.
− Accounting Server IP—Enter the IP address of the accounting server.
− Accounting Server Port—Enter the port of the accounting server. The default port is 1813.
− Server Type—Select the Extended or Standard type for the RADIUS server. An extended
RADIUS server supports more RADIUS attributes than a standard RADIUS server.
− Password Type—Select the Plaintext or Ciphertext format for the Accounting key.
− Accounting key—Enter the key that the VAM server uses to communicate with the
accounting server.
− Username Format—Select a username format that the VAM server uses to send usernames
of clients to the RADIUS server. If Keep-original is selected, the VAM server does not change
the format of usernames. If With-domain is selected, the VAM server adds the default
domain name to the usernames that do not have a domain name. If Without-domain is
selected, the VAM server removes the domain name of usernames.
− Permit RADIUS Client—Select this option to enable the VAM server to receive and send
RADIUS packets.
{
Local—Enables local authentication on VAM clients.
{
None—Disables authenticating VAM clients.
5. Click OK.
Modifying basic hub settings
1. On the DVPN topology, click the Hub icon .
The basic hub settings are displayed at the bottom area.
A DVPN network can accommodate up to two hubs. A grayed-out Hub icon on the topology
indicates the hub is not specified. For information about how to add a hub to a DVPN domain, see
" Configuring basic hub settings "and" Configuring advanced hub settings ."
Hub configuration includes basic and advanced settings.
The hub name cannot be modified.
2. Modify the IP address and port of the primary VAM server in the Primary VAM Server IP and
Primary VAM Server Port fields.
3. Modify the IP address and port of the secondary VAM server in the Secondary VAM Server IP and
Secondary VAM Server Port fields.