H3C Technologies H3C WX3000E Series Wireless Switches - Manual (Page 353)

340
Configuring AAA
Configuration prerequisites
To deploy local authentication, configure local users on the access device as described in the chapter
"User configuration."
To deploy remote authentication, authorization, or accounting, create the RADIUS schemes to be
referenced as described in the chapter "RADIUS configuration."
Recommended configuration procedure
Step Remarks
1. Configuring an ISP
domain
Optional.
Create ISP domains and specify one of them as the default ISP domain.
By default, there is an ISP domain named system, which is the default ISP
domain.
2. Configuring
authentication
methods for the ISP
domain
Optional.
Configure authentication methods for various types of
users.
By default, all types of users use local authentication.
AAA user types
include LAN access
users (such as
802.1X
authentication users
and MAC
authentication users),
login users (such as
SSH, Telnet, FTP,
terminal access
users), PPP users, and
Command users.
3. Configuring
authorization methods
for the ISP domain
Optional.
Specify the authorization methods for various types of
users.
By default, all types of users use local authorization.
4. Configuring
accounting methods
for the ISP domain
Required.
Specify the accounting methods for various types of
users.
By default, all types of users use local accounting.
Configuring an ISP domain
1. Select Authentication > AAA from the navigation tree.
The Domain Setup page appears.