R3721-F3210-F3171-HP High-End Firewalls Access Control Configuration Guide-6PW101
220
# Configure the IP address of interface GigabitEthernet 0/2, through which Firewall
communicates with the server.
[Firewall] interface GigabitEthernet 0/2
[Firewall-GigabitEthernet0/2] ip address 10.1.1.2 255.255.255.0
[Firewall-GigabitEthernet0/2] quit
# Enable the Telnet server on Firewall.
[Firewall] telnet server enable
# Configure Firewall to use AAA for Telnet users.
[Firewall] user-interface vty 0 4
[Firewall-ui-vty0-4] authentication-mode scheme
[Firewall-ui-vty0-4] quit
# Create RADIUS scheme rad.
[Firewall] radius scheme rad
# Specify the primary authentication server.
[Firewall-radius-rad] primary authentication 10.1.1.1 1812
# Set the shared key for authenticating authentication packets to expert.
[Firewall-radius-rad] key authentication expert
# Specify the service type for the RADIUS server, which must be extended when the server runs on
IMC.
[Firewall-radius-rad] server-type extended
# Specify the scheme to include the domain names in usernames to be sent to the RADIUS server.
[Firewall-radius-rad] user-name-format with-domain
[Firewall-radius-rad] quit
# Configure the AAA methods for domain bbb. Because RADIUS authorization information is sent
to the RADIUS client in the authentication response messages, reference the same scheme for user
authentication and authorization.
[Firewall] domain bbb
[Firewall-isp-bbb] authentication login radius-scheme rad
[Firewall-isp-bbb] authorization login radius-scheme rad
[Firewall-isp-bbb] quit
Verifying the configuration
After you complete the configuration, the user can Telnet to telnet to Firewall, use the configured account
to enter the user interface of Firewall, and access all the commands of level 0 to level 3.
# Use the display connection command to view the connection information on Firewall.
[Firewall] display connection
Index=1 ,Username=hello@bbb
IP=192.168.1.58
IPv6=N/A
Total 1 connection(s) matched.
Local authentication and authorization for Telnet and FTP users
The local authentication and authorization configuration for FTP users is similar to that for Telnet users.
This example describes the configuration for Telnet users.