R3303-HP HSR6800 Routers Security Configuration Guide

26
Task Command Remarks
Display local user
information (in standalone
mode).
display local-user [ idle-cut { disable | enable } |
service-type { dvpn | ftp | lan-access | portal | ppp | ssh |
telnet | terminal } | state { active | block } | user-name
user-name | vlan vlan-id ] [ slot slot-number ] [ | { begin |
exclude | include } regular-expression ]
Available in any
view.
The ftp and telnet
keywords are not
supported in FIPS
mode.
Display local user
information (in IRF mode).
display local-user [ idle-cut { disable | enable } |
service-type { dvpn | ftp | lan-access | portal | ppp | ssh |
telnet | terminal } | state { active | block } | user-name
user-name | vlan vlan-id ] [ chassis chassis-number slot
slot-number ] [ | { begin | exclude | include }
regular-expression ]
Available in any
view.
The ftp and telnet
keywords are not
supported in FIPS
mode.
Display the user group
configuration.
display user-group [ group-name ] [ | { begin | exclude |
include } regular-expression ]
Available in any
view.
Configuring RADIUS schemes
A RADIUS scheme specifies the RADIUS servers that the device can cooperate with and defines a set of
parameters that the device uses to exchange information with the RADIUS servers. There might be
authentication/authorization servers and accounting servers, or primary servers and secondary servers.
The parameters include the IP addresses of the servers, the shared keys, and the RADIUS server type.
RADIUS scheme configuration task list
Task Remarks
Creating a RADIUS scheme Required.
Specifying the RADIUS authentication/authorization servers Required.
Specifying the RADIUS accounting servers and the relevant parameters Optional.
Specifying the shared keys for secure RADIUS communication Optional.
Specifying a VPN for the RADIUS scheme Optional.
Setting the username format and traffic statistics units Optional.
Setting the supported RADIUS server type Optional.
Setting the maximum number of RADIUS request transmission attempts Optional.
Setting the status of RADIUS servers Optional.
Specifying the source IP address for outgoing RADIUS packets Optional.
Setting RADIUS timers Optional.
Configuring RADIUS accounting-on Optional.
Configuring the IP address of the security policy server Optional.
Configuring interpretation of the RADIUS class attribute as CAR parameters Optional.
Enabling the trap function for RADIUS Optional.
Enabling the RADIUS client service Optional.