R1 has the following configurations: [R1] radius-server template 1 [R1-radius-1] radius-server authentication 10.1.6.6 1812 [R1-radius-1]…

The configuration establishes a domain named huawei.com. When a user provides a username in the format user@domain, the device uses the AAA configuration specific to that domain. Here, [email protected] matches the huawei.com domain. This domain is configured to use authentication-scheme auth1, which in turn is set to authentication-mode radius. Therefore, the authentication request will be processed using the RADIUS protocol and sent to the configured RADIUS server.

A. RADIUS protocol explicitly supports accounting functions. The configuration correctly specifies an accounting server on UDP port 1813, which is the standard port for RADIUS accounting.

B. RADIUS combines authentication and authorization. The RADIUS server sends authorization information within the Access-Accept packet. A separate authorization server configuration is not required.

C. The RADIUS protocol operates over UDP, not TCP. The standard ports are UDP/1812 for authentication and UDP/1813 for accounting, as configured in the template.

1. Huawei HedEx Documentation for VRP V800R012C10

Configuration Guide - Security

Section: "AAA Configuration -> Configuring a RADIUS Server Template". This section details how to configure RADIUS servers for authentication and accounting.

2. Huawei HedEx Documentation for VRP V800R012C10

Configuration Guide - Security

Section: "AAA Configuration -> Configuring a Domain". This section explains how usernames containing a domain name are mapped to a specific domain's AAA policies.

3. RFC 2865

"Remote Authentication Dial In User Service (RADIUS)"

Section 3. This RFC specifies that RADIUS runs over UDP.