H3C Technologies H3C S3100 Series Switches - Manual (Page 415)

2-1
2
AAA Configuration
AAA Configuration Task List
Configuration introduction
You need to configure AAA to provide network access services for legal users while protecting network
devices and preventing unauthorized access and repudiation behavior.
Table 2-1 AAA configuration tasks (configuring a combined AAA scheme for an ISP domain)
Task Remarks
Creating an ISP Domain and Configuring
Its Attributes
Required
Configuring a combined AAA scheme Required
Configuring an AAA Scheme for an ISP
Domain
Required
z You can configure a set of AAA
schemes specific to different user
access modes in an ISP domain.
z You need to configure RADIUS or
HWATACACS before performing
RADIUS or HWTACACS
authentication.
Configuring Dynamic VLAN Assignment Optional
Configuring the Attributes of a Local User Optional
AAA
configuration
Cutting Down User Connections Forcibly Optional
Table 2-2 AAA configuration tasks (configuring separate AAA schemes for an ISP domain)
Task Remarks
Creating an ISP Domain and Configuring
Its Attributes
Required
Configuring separate AAA schemes Required
Configuring an AAA Scheme for an ISP
Domain
Required
z With separate AAA schemes, you
can specify authentication,
authorization and accounting
schemes respectively.
z You need to configure RADIUS or
HWATACACS before performing
RADIUS or HWTACACS
authentication.
Configuring Dynamic VLAN Assignment Optional
AAA
configuration
Configuring the Attributes of a Local User Optional