No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

Web-based Configuration Guide

AR650, AR1600, and AR6100 V300R003

This document describes how to configure and maintain your routers using the web platform.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
RADIUS Setting

RADIUS Setting

Context

RADIUS protects a network from unauthorized access. It is often used on the networks that require high security and remote user access control.

0

Procedure

  • RADIUS server template

    • Creating a RADIUS server template

    1. Access the RADIUS Setting tab page.

      Log in to the web platform and choose Security > AAA > RADIUS Setting. As show in Figure 14-57.

      Figure 14-57   RADIUS Setting

    2. Click Create in the RADIUS Server Template area, and set parameters in the Create RADIUS Server Template dialog box that is displayed. Table 14-28 describes the parameters. As show in Figure 14-58.

      Figure 14-58   Create RADIUS Server Template

      Table 14-28  Parameters for creating a RADIUS server template

      Parameter

      Description

      Template name

      Name of a RADIUS server template.

      Cipher key

      Shared key for the RADIUS server.

      The shared key is used to encrypt the password and generate the response authenticator.

      Confirm key

      Confirmed shared key of the RADIUS server.

      User name

      Whether the packets sent by the device to the RADIUS server contain domain names.
      • Original user name
      • With domain name
      • Without domain name
      NOTE:

      If the RADIUS server does not accept the user names carrying domain names, select Without domain name. Then the device removes domain names from the user names.

      Mode

      RADIUS server mode:
      • Active/Standby: When multiple RADIUS authentication or accounting servers are configured, the server with the highest weight becomes the active server, and the other servers are backup servers. Among the backup servers, the servers with higher weight have higher priority. If the servers have the same weights, they are selected in the sequence in which they were configured.
      • Load balancing: The device distributes authentication or accounting packets to the RADIUS servers based on the weights of the servers. For example, the weights of server A, server B, and server C are 80, 80, and 40. The possibilities that the device sends packets to the servers are as follows:
        1. Server A: 80/(80 + 80 + 40) = 40%
        2. Server B: 80/(80 + 80 + 40) = 40%
        3. Server C: 40/(80 + 80 + 40) = 20%

    3. Click OK.

    • Modifying a RADIUS server template

    1. Access the RADIUS Setting tab page.

      Log in to the web platform and choose Security > AAA > RADIUS Setting.

    2. Select a RADIUS server template in the RADIUS Server Template area, and click .
    3. In the Modify RADIUS Server Template dialog box that is displayed, modify the parameters. The parameter Template name cannot be modified. The parameters are the same as those in Figure 14-58
    4. Click OK.

    • Deleting a RADIUS server template

    1. Access the RADIUS Setting tab page.

      Log in to the web platform and choose Security > AAA > RADIUS Setting.

    2. Select the check box of a RADIUS server template in the RADIUS Server Template area, and click Delete.
    3. In the dialog box that is displayed, click OK.
  • Authentication/Accounting server

    • Creating an authentication or accounting server

    1. Access the RADIUS Setting tab page.

      Log in to the web platform and choose Security > AAA > RADIUS Setting.

    2. Click Create in the Authentication/Accounting Server area, and set parameters in the Create Authentication/Accounting Server dialog box that is displayed. Table 14-29 describes the parameters. As show in Figure 14-59.

      Figure 14-59   Create Authentication/Accounting Server

      Table 14-29  Parameters for creating an authentication or accounting server

      Parameter

      Description

      Template name

      Name of the created RADIUS server template.

      Server type

      RADIUS server type: authentication or accounting server.

      VPN instance

      Created VPN instance.

      IP address

      IP address of the RADIUS authentication/accounting server.

      Port

      Port number of the RADIUS authentication/accounting server.

      Weight value

      Weight of the RADIUS authentication/accounting server.

      NOTE:

      You can quickly search for the created authentication or accounting servers based on the specified criteria.

      A maximum of four RADIUS servers can be configured in a RADIUS template. The device sends authentication or accounting packets to the servers in the configured mode.

    3. Click OK.

    • Modifying an authentication or accounting server

    1. Access the RADIUS Setting tab page.

      Log in to the web platform and choose Security > AAA > RADIUS Setting.

    2. Select an authentication or accounting server in the Authentication/Accounting Server area, and click .
    3. In the Modify Authentication/Accounting Server dialog box that is displayed, modify the parameters. The parameters Template name and Server type cannot be modified. The parameters are the same as those in Figure 14-59
    4. Click OK.

    • Deleting an authentication or accounting server

    1. Access the RADIUS Setting tab page.

      Log in to the web platform and choose Security > AAA > RADIUS Setting.

    2. Select the check box of an authentication or accounting server in the Authentication/Accounting Server area, and click Delete.
    3. In the dialog box that is displayed, click OK.
  • Authorization server

    • Creating an authorization server

    1. Access the RADIUS Setting tab page.

      Log in to the web platform and choose Security > AAA > RADIUS Setting.

    2. Click Create in the Authorization Server area, and set parameters in the Create Authorization Server dialog box that is displayed. Table 14-30 describes the parameters. As show in Figure 14-60.

      Figure 14-60  Create Authorization Server

      Table 14-30  Parameters for creating an authorization server

      Parameter

      Description

      Authorization server IP address

      IP address of an authorization server.

      VPN instance

      Created VPN instance.

      Template name

      Name of the created RADIUS server template.

      Cipher key

      Shared key of the RADIUS authorization server.

      Confirm key

      Confirmed shared key of the RADIUS authorization server.

    3. Click OK.

    • Modifying an authorization server

    1. Access the RADIUS Setting tab page.

      Log in to the web platform and choose Security > AAA > RADIUS Setting.

    2. Select an authorization server in the Authorization Server area, and click .
    3. In the Modify Authorization Server dialog box that is displayed, modify the parameters. The parameters Authorization server IP address and VPN instance cannot be modified. The parameters are the same as those in Figure 14-60
    4. Click OK.

    • Deleting an authorization server

    1. Access the RADIUS Setting tab page.

      Log in to the web platform and choose Security > AAA > RADIUS Setting.

    2. Select the check box of an authorization server in the Authorization Server area, and click Delete.
    3. In the dialog box that is displayed, click OK.
Download
Updated: 2019-04-12

Document ID: EDOC1100041803

Views: 35978

Downloads: 100

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next