This post is about the process of how to configure the RADIUS authentication on the CE series switches.
It would be as follows:
<HUAWEI> system-view[HUAWEI] radius enable //Enable the RADIUS protocol.
[*HUAWEI] radius server group shiva //Create a RADIUS server group and enter the RADIUS server group view.
[*HUAWEI-radius-shiva] radius server shared-key-cipher Huawei#2012 //Configure the shared key of the RADIUS server.
[*HUAWEI-radius-shiva] radius server authentication 10.7.66.66 1812 //Configure the IP address and port number of the RADIUS authentication server.
[*HUAWEI-radius-shiva] radius server accounting 10.7.66.66 1813 //Configure the IP address and port number of the RADIUS accounting server.
[*HUAWEI-radius-shiva] commit[HUAWEI-radius-shiva] quit[HUAWEI] aaa[HUAWEI-aaa] authentication-scheme auth //Create an authentication scheme and enter the authentication scheme view.
[*HUAWEI-aaa-authen-auth] authentication-mode radius //Set the authentication mode to RADIUS authentication.
[*HUAWEI-aaa-authen-auth] commit[HUAWEI-aaa-authen-auth] quit[HUAWEI-aaa] accounting-scheme abc //Create an accounting scheme and enter the accounting scheme view.
[*HUAWEI-aaa-accounting-abc] accounting-mode radius //Set the accounting mode to RADIUS accounting.
[*HUAWEI-aaa-accounting-abc] commit[HUAWEI-aaa-accounting-abc] quit[HUAWEI-aaa] domain huawei //Create a domain and enter the domain view.
[*HUAWEI-aaa-domain-huawei] authentication-scheme auth //Configure the authentication scheme for the domain.
[*HUAWEI-aaa-domain-huawei] accounting-scheme abc //Configure the accounting scheme for the domain.
[*HUAWEI-aaa-domain-huawei] radius server group shiva //Configure the RADIUS server group for the domain.
[*HUAWEI-aaa-domain-huawei] commit[HUAWEI-aaa-domain-huawei] quit[HUAWEI-aaa] quit[HUAWEI] quit
You can also find the answer in the Common AAA Operations.
