3com 3031 Instruccion De Instalación

AAA and RADIUS Configuration

785

is used to authenticate, the authentication for corresponding users should be
configured on the RADIUS server.

FTP , SSH and Terminal are not standard attribute values in RADIUS protocol, so
the following attribute value definitions should be added in the attribute
login-service (standard attribute 15) of RADIUS server:

login-service (50) = FTP

login-service(51) = Terminal

login-service(52) = SSH

Start RADIUS server after the modification.

Configuring Authentication Scheme for PPP Users

The PPP authentication-scheme will be used for the authentication on the users
accessing the network by setting up PPP connections with the router or access
server (through dial, PPPoE, or PPPoA).

Perform the following task in System View.

Where

method1

, can be any of the authentication methods:

■

none

■

local

■

radius

■

radius none

■

radius local

The argument

method2

, however, can only be local or none.

You are allowed to configure multiple PPP authentication-schemes for different
ports.

Configuring Local-First Authentication of AAA

The configuration of local-first authentication is optional. If it has not been
configured, RADIUS authentication will be performed on the users.

Table 843 Configuring PPP authentication scheme of AAA

Operation

Command

Authenticate users using PPP service with
the specified scheme

aaa authentication-scheme ppp {

default | scheme-name } [ method1 |

[ template server-template-name [

method2 ] ]

Cancel the authentication of users using
PPP service with the specified scheme

undo aaa authentication-scheme ppp

{ default | scheme-name }