Configuring User Testing
User testing is used to locate a fault by checking whether a user can pass the authentication of a RADIUS server group when the AAA server does not function properly.
Context
In the following RADIUS attribute configuration, Step 3 and Step 4 can be configured based on service requirements.
Perform the following steps on the router:
- The password must be at least eight characters long and contains at least two of the following character types: uppercase letters, lowercase letters, digits, and special characters.
- For security purposes, you are advised to specify the ciphertext mode To improve the device security, periodically change the password.
Procedure
- Run system-view
The system view is displayed.
- Run radius-test-group radius-test-group-name
The RADIUS server test template is configured.
- Run include [ authentication | accounting ] { radius-attr-name auto | radius-attr-name radius-attribute-value | User-PasswordUser-Password | CHAP-PasswordCHAP-Password }
The RADIUS attributes to be sent are added to the RADIUS server test template.
- Run exclude [ authentication | accounting ] radius-attr-name
The RADIUS attributes that are excluded from the RADIUS server test template are configured.
- Run commit
The configuration is committed.
Follow-up Procedure
Run the test-aaa user-name password [ password random [ random1 random2 ] timestamp [ timestamp1 timestamp2 ] ] radius-group group-name [ chap | pap ] [ test-group test-group-name ] command in any view to locate a fault by checking whether a user can pass the authentication of the RADIUS server group.