hi,
if that guide is right, seems fairly simply, you just need to set
       Service-Type = NAS-Prompt-User
       Huawei-Exec-Privilege = "3"
       Login-Service = 50
can all be done via SQL replies, group replies or just in the users file. 
alan