3Com 10014298 manual Examples, Remote Radius Server

238CHAPTER 9: AAA AND RADIUS OPERATION

Table 256 Displaying and Debugging AAA and RADIUS/HWTACACS Protocol

Operation	Command
Clear stop-accounting packets from the buffer	reset stop-accounting-buffer {
	radius-schemeradius-scheme-name
	session-idsession-id
	time-rangestart-time stop-time
	user-nameuser-name }
Reset the statistics of RADIUS server	reset radius statistics
Clear stop-accounting packets from the buffer	reset stop-accounting-buffer
	hwtacacs-scheme
	hwtacacs-scheme-name
Reset the statistics of HWTACACS server	reset hwtacacs statistics {
	accounting authentication
	authorization all }

Enable RADIUS packet debugging Disable RADIUS packet debugging

Enable debugging of local RADIUS authentication server

Disable debugging of local RADIUS authentication server

Enable HWTACACS debugging

Disable HWTACACS debugging

debugging radius packet

undo debugging radius packet

debugging local-server { all error event packet }

undo debugging local-server { all error event packet }

debugging hwtacacs { all error event message receive-packet send-packet }

undo debugging hwtacacs { all error event message receive-packet send-packet }

AAA, RADIUS, and AAA/RADIUS protocol configuration commands are generally used together with

HWTACACS Protocol 802.1x configuration commands. Refer to the typical configuration examples

Configuration provided in “Configuring 802.1x” on page 209.

Examples

Configuring FTP/Telnet Configuring Telnet user authentication at the remote server is similar to User Authentication at configuring FTP users. The following description is based on Telnet users.

Remote RADIUS Server

In the environment illustrated in the following figure, the the RADIUS server must be configured to authenticate the Telnet users to be registered.

One RADIUS server (the authentication server) is connected to the switch and the server IP address is 10.110.91.146. The password for exchanging messages between the switch and the authentication server is "expert". The switch cuts off domain name from username and sends the left part to the RADIUS server.