3com 8807 사용자 가이드
262
C
HAPTER
26: AAA
AND
RADIUS/HWTACACS P
ROTOCOL
C
ONFIGURATION
AAA and
RADIUS/HWTACACS
Protocol
Configuration
Examples
RADIUS/HWTACACS
Protocol
Configuration
Examples
For the hybrid configuration example of AAA/RADIUS/HWTACACS protocol and
802.1x protocol, refer to the part "802.1x".
802.1x protocol, refer to the part "802.1x".
Perform the following configuration in system view.
The anti-attack function of IP packets is enabled while the anti-attack function of
ARP packets and dot1x packets are disabled by default.
ARP packets and dot1x packets are disabled by default.
Display all global NAS-IP
information configured in system
view
information configured in system
view
display radius nas-ip
Display the statistics of RADIUS
packets
packets
display radius statistics
Display the stop-accounting
requests saved in buffer without
response
requests saved in buffer without
response
display stop-accounting-buffer { radius-scheme
radius-scheme-name | session-id session-id | time-range
start-time stop-time | user-name user-name }
radius-scheme-name | session-id session-id | time-range
start-time stop-time | user-name user-name }
Reset the statistics of RADIUS
server
server
reset radius statistics
Display the specified or all the
HWTACACS schemes
HWTACACS schemes
display hwtacacs [ hwtacacs-server-name ]
Display the HWTACACS
stop-accounting requests saved
in buffer without response
stop-accounting requests saved
in buffer without response
display stop-accounting-buffer hwtacacs-scheme
hwtacacs-scheme-name
hwtacacs-scheme-name
Delete the stop-accounting
requests saved in buffer without
response
requests saved in buffer without
response
reset stop-accounting-buffer { radius-scheme
radius-scheme-name | session-id session-id | time-range
start-time stop-time | user-name user-name }
radius-scheme-name | session-id session-id | time-range
start-time stop-time | user-name user-name }
Delete the HWTACACS
stop-accounting requests saved
in buffer without response
stop-accounting requests saved
in buffer without response
reset stop-accounting-buffer hwtacacs-scheme
hwtacacs-scheme-name
hwtacacs-scheme-name
Reset the statistics of
HWTACACS server
HWTACACS server
reset hwtacacs statistics { accounting | authentication
| authorization | all }
| authorization | all }
Enable RADIUS packet debugging debugging radius packet
Disable RADIUS packet
debugging
debugging
undo debugging radius packet
Enable debugging of local
RADIUS authentication server
RADIUS authentication server
debugging local-server { all | error | event | packet }
Disable debugging of local
RADIUS authentication server
RADIUS authentication server
undo debugging local-server { all | error | event |
packet }
packet }
Enable HWTACACS debugging
debugging hwtacacs { all | error | event | message |
receive-packet | send-packet }
receive-packet | send-packet }
Disable HWTACACS debugging
undo debugging hwtacacs { all | error | event |
message | receive-packet | send-packet }
message | receive-packet | send-packet }
Table 242 Display and debug AAA and RADIUS/HWTACACS protocol
Operation Command
Table 243 Enable/disable the anti-attack function of packets
Operation
Command
Enable/disable the anti-attack function of
packets
packets
anti-attack { arp | dot1x | ip } { disable |
enable }
enable }