3com 3031 Instruccion De Instalación
AAA and RADIUS Configuration
795
Perform the following configuration in System View.
dnis-number
is the called number, usually the access number such as 163 and
169.
Mapping DNIS Number with AAA Authentication Server
After enabling AAA server selection on the basis of DNIS number, you can
configure the RADIUS authentication server that can be selected for a PPP user on
the basis of the incoming dial number. The user can select the designated RADIUS
server or RADIUS server template for authentication. If the incoming dial number
has not been associated with any AAA server, the authentication method
configured on the interface will be adopted.
configure the RADIUS authentication server that can be selected for a PPP user on
the basis of the incoming dial number. The user can select the designated RADIUS
server or RADIUS server template for authentication. If the incoming dial number
has not been associated with any AAA server, the authentication method
configured on the interface will be adopted.
Perform the following configuration in System View.
Configuring Applied
Authentication/
Accounting Scheme
Globally or on Interface
This section describes the configuration procedure for the applied
authentication/accounting scheme.
authentication/accounting scheme.
1 Configuring applied authentication scheme for FTP users
.
The authentication scheme for FTP users are imported globally the moment AAA
authentication scheme is configured.
authentication scheme is configured.
By default, local authentication (see the “System Management” sector of this
manual for detailed configuration) is selected for FTP users. But if you select
RADIUS authentication, you should set FTP attribute (value of 50) in service
attribute (login-service) of RADIUS server and specify paths accessible to FTP users.
manual for detailed configuration) is selected for FTP users. But if you select
RADIUS authentication, you should set FTP attribute (value of 50) in service
attribute (login-service) of RADIUS server and specify paths accessible to FTP users.
2 Configuring applied authentication scheme for Telnet/Terminal users
.
After configuring authentication scheme for Login users, you need to import AAA
authentication scheme for Telnet/Terminal users in the user view.
authentication scheme for Telnet/Terminal users in the user view.
Table 865 Mapping DNIS number with AAA accounting server
Operation
Command
Map DNIS number with AAA
accounting server
accounting server
dnis-map dnis-number accounting {
[ start-stop | wait-start |
stop-only ]{ template
server-template-name |
radius-server { ip-address |
radius-server }}| none }
Remove the map of DNIS number and
AAA accounting server
AAA accounting server
undo dnis-map dnis-number
accounting
Table 866 Mapping DNIS number with AAA authentication server
Operation
Command
Map DNIS number with AAA authentication
server
server
dnis-map dnis-number
authentication { template
server-template-name |
radius-server { ip-address |
radius-server }}
Remove the map of DNIS number and AAA
authentication server
authentication server
undo dnis-map dnis-number
authentication