資源描述:
《華為思科設(shè)備RADIUS配置教程》由會員上傳分享,免費(fèi)在線閱讀,更多相關(guān)內(nèi)容在教育資源-天天文庫。
1、1.RADIUS配置RADIUS客戶端配置:思科設(shè)備例子:交換機(jī)和路由器的配置:aaanew-modelaaaauthenticationloginauthgroupradiuslocal//配置登陸認(rèn)證的優(yōu)先級radius-serverhost139.123.252.245auth-port1812acct-port1813//配置RADIUS服務(wù)器IP地址和端口。radius-serverhost139.123.252.244auth-port1812acct-port1813radius-serverretransmit3radius-s
2、erverkeyZDBF%51//配置密碼linevty04loginauthenticationauth防火墻PIX的配置:aaa-serverradius-authport1812aaa-serverradius-acctport1813aaa-serverTACACS+protocoltacacs+aaa-serverRADIUSprotocolradiusaaa-serverrsa_radiusprotocolradiusaaa-serverauthprotocolradiusaaa-serverauth(inside)host192.
3、168.41.226ZDBF%51timeout10aaa-serverLOCALprotocoltacacs+aaa-serverradiusprotocolradiusaaaauthenticationtelnetconsoleauth華為設(shè)備例子:VRP3.X版本的配置:radiusschemeauthprimaryauthentication192.168.41.2261812//配置主用服務(wù)器IP地址和端口primaryaccounting192.168.41.2261813secondaryauthentication192.168
4、.41.2271812//配置備用服務(wù)器IP地址和端口secondaryaccounting192.168.41.2271813keyauthenticationZDBF%51//配置密碼keyaccountingZDBF%51user-name-formatwithout-domaindomainauthschemeradius-schemeauthlocalaccountingoptionaldomaindefaultenableauthuser-interfacevty04authentication-modeschemeVRP5.X版本
5、的配置:radiusschemeauthprimaryauthentication192.168.41.2261812//配置主用服務(wù)器IP地址和端口primaryaccounting192.168.41.2261813secondaryauthentication192.168.41.2271812//配置備用服務(wù)器IP地址和端口secondaryaccounting192.168.41.2271813keyauthenticationZDBF%51//配置密碼keyaccountingZDBF%51domainauthauthenticat
6、iondefaultradius-schemeauthlocal//配置AAA中的認(rèn)驗(yàn)?zāi)J絘uthorizationdefaultradius-schemeauthlocal//配置AAA中的授權(quán)模式accountingoptionaldomaindefaultenableauthuser-interfacevty04authentication-modescheme華為E100、E200和E500的配置:radius-servertemplateauthradius-servershared-keyZDBF%51radius-serverau
7、thentication192.168.41.2261812radius-serverauthentication192.168.41.2271812secondaryradius-serveraccounting192.168.41.2261813radius-serveraccounting192.168.41.2271813secondaryaaalocal-userhuaweipasswordcipherN`C55QK<`=/Q=^Q`MAF4<1!!authentication-schemedefaultauthentication-
8、moderadiuslocal#authorization-schemedefault#accounting-schemedefault#domain