Huawei SmartAX MA5603T Configuration Manual page 264

SmartAX MA5600T/MA5603T/MA5608T Multi-service
Access Module
Commissioning and Configuration Guide
secondary
huawei(config-radius-hwtacacs)#radius-server accounting 10.10.66.66 1813
huawei(config-radius-hwtacacs)#radius-server accounting 10.10.66.67 1813 secondary
huawei(config-radius-hwtacacs)#quit
Step 4 Create a domain.
Create a domain named isp1.
huawei(config)
#aaa
huawei(config-aaa)#domain isp1
Info: Create a new domain
Step 5 Use the authentication scheme.
You can use an authentication scheme in a domain only after the authentication scheme is
created.
huawei(config-aaa-domain-isp1)#authentication-scheme newscheme
Step 6 Use the accounting scheme.
You can use an accounting scheme in a domain only after the accounting scheme is created.
huawei(config-aaa-domain-isp1)#accounting-scheme newscheme
Step 7 Use the RADIUS server template.
You can use a RADIUS server template in a domain only after the RADIUS server template is
created.
huawei(config-aaa-domain-isp1)#radius-server hwtacacs
huawei(config-aaa-domain-isp1)#quit
----End
Result
User 1 in ISP 1 can pass authentication only if both the user name and password are correct, and
then can log in to the MA5600T/MA5603T/MA5608T. Then, the user starts to be accounted.
Configuration File
aaa
authentication-scheme newscheme
authentication-mode radius
quit
accounting-scheme
newscheme
accounting-mode
radius
accounting interim interval 10
quit
quit
radius-server template radtest
radius-server authentication 10.10.66.66
1812
radius-server authentication 10.10.66.67 1812 secondary
radius-server accounting 10.10.66.66
1813
radius-server accounting 10.10.66.67 1813 secondary
quit
Issue 01 (2014-04-30) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
2 Basic Configurations
239