51
Figure 10
Configure authentication/authorization for Telnet users through a RADIUS server
Internet
Router
Telnet user
192.168.1.58/24
RADIUS server
10.1.1.1/24
GE1/0/1
192.168.1.70/24
GE1/0/2
10.1.1.2/24
Configuration procedure
This example assumes that the RADIUS server runs iMC PLAT 5.0 (E0101) and iMC UAM 5.0 (E0101).
1.
Configure the RADIUS server.
# Add an access device.
Log in to the iMC management platform, click the
Service
tab, and select
User Service Manager
>
Access
Device
from the navigation tree to enter the
Access Device
page. Then, click
Add
to enter the
Add Access
Device
page, and perform the following configurations as shown in
:
a.
Set the shared key for authenticating authentication and accounting to
expert
.
b.
Specify the ports for authentication and accounting as 1812 and 1813, respectively.
c.
Select
Device Management Service
as the service type.
d.
Select
HP
as the access device type.
e.
Select the access device from the device list, or manually add the device with the IP address of
10.1.1.2.
f.
Click
OK
to finish the operation.
NOTE:
The IP address of the access device specified above must be the same as the source IP address of the
RADIUS packets sent from the device, which is the IP address of the outbound interface for RADIUS
packets (the default), or the IP address specified with
nas-ip
or
radius nas-ip
.