58
Figure 15
Configure RADIUS authentication for level switching users
Configuration considerations
1.
Configure the router to use AAA, particularly, local authentication for Telnet users.
{
Create ISP domain
bbb
and configure it to use local authentication for Telnet users.
{
Create a local user account, configure the password, and assign the privilege level for the user
to use after login.
2.
On the router, configure the authentication method for user privilege level switching.
{
Specify to use RADIUS authentication and, if RADIUS authentication is not available, use local
authentication for users switching from a lower level to a higher level.
{
Configure RADIUS scheme
rad
and assign an IP address to the RADIUS server. Set the shared
keys for authenticating AAA packets, and specify that usernames sent to the RADIUS server
carry no domain name. Configure the domain to use RADIUS scheme
rad
for user privilege
level switching authentication.
{
Configure the password for local user privilege level switching authentication.
3.
On the RADIUS server, add the username and password for user privilege level switching
authentication.
Configuration procedure
1.
Configure the router.
# Configure the IP address of GigabitEthernet 1/0/1, through which the Telnet user accesses the router.
<Router> system-view
[Router] interface gigabitethernet 1/0/1
[Router-GigabitEthernet1/0/1] ip address 192.168.1.70 255.255.255.0
[Router-GigabitEthernet1/0/1] quit
# Configure the IP address of GigabitEthernet 1/0/2, through which the router communicates with the
server.
[Router] interface gigabitethernet 1/0/2
[Router-GigabitEthernet1/0/2] ip address 10.1.1.2 255.255.255.0
[Router-GigabitEthernet1/0/2] quit
# Enable the router to provide Telnet service.
[Router] telnet server enable
