R3303-HP HSR6800 Routers Security Configuration Guide

159
4. Associate the portal device with the IP address group:
a. As shown in Figure 65, cl
ick the icon in the Port Group Information Management column of
device NAS to enter the port group configuration page.
Figure 65 Device list
b. On the port group configuration page, click Add to enter the page shown in Figure 66.
c. Enter the port group name.
d. Select the configured IP address group.
The IP address used by the user to access the network must be within this IP address group.
e. Use the default settings for other parameters.
f. Click OK.
Figure 66 Adding a port group
5. Select User Access Manager > Service Parameters > Validate from the navigation tree to validate
the configurations.
Configuring the router
1. Configure a RADIUS scheme:
# Create RADIUS scheme rs1 and enter its view.
<Router> system-view
[Router] radius scheme rs1
# Configure the server type for the RADIUS scheme. When using the IMC server, configure the
RADIUS server type as extended.
[Router-radius-rs1] server-type extended
# Specify the primary authentication/authorization server, and configure the keys for
communication with the servers.
[Router-radius-rs1] primary authentication 192.168.0.112
[Router-radius-rs1] key authentication simple radius
# Configure the access device to not carry the ISP domain name in the username sent to the
RADIUS server.