544 CHAPTER 38: CONFIGURING AAA AND RADIUS PROTOCOL
3Configure RADIUS server
[Router] radius server 129.7.66.66 authentication-port 1000
accounting-port 1001
[Router] radius server 129.7.66.67
4Configure RADIUS server shared secret, retransmission times, and time length of
timeout timer
[Router] radius shared-key this-is-my-secret
[Router] radius retry 2
5Configure real-time accounting with interval of 5 minutes
[Router] radius timer realtime-accounting 5
Authenticating an FTP
UserThe authentication server is 129.7.66.66, numbers of ports being 1812 and 1813.
Authenticate and charge FTP users using RADIUS server first, and if there is no
response, do not authenticate or charge them.
See Figure 169.
1Enable AAA and configure default authentication method list of FTP user.
[Router]aaa-enable
[Router]aaa authentication-scheme login default radius none
2Enable FTP server
[Router]ftp-server enable
3Configure user abc and authorize the user to use FTP service.
[Router] local-user abc service-type ftp password simple hello
4Configure RADIUS server IP address and port, using default port number
[Router]radius server 129.7.66.66
5Configure RADIUS server shared secret, retransmission times, timeout and RADIUS
server dead time.
[Router] rad shared-key this-is-my-secret
[Router] radius retry 4
[Router] radius timer response-timeout 2
[Router] radius timer quiet 1
Troubleshooting AAA
and RADIUS Local user authentication is always rejected
Follow the steps below.
1Check whether correct password has been configured in local-user command.
2Check whether the authorized service-type is correct.
3When RADIUS server accounting is used, and the command aaa
accounting-scheme optional is not configured, check whether the RADIUS
server can be pinged through. Also check whether the address, port number and
key of RADIUS server configured on the router for accounting are identical with
those on the RADIUS server in use.
4If the operation above does not work, use the radius server command to
reconfigure the RADIUS server. Because of the communication failure with the
RADIUS server mentioned. RADIUS server is considered by the system as