27 aaa configuration, Aaa configuration task list, Configuration introduction – H3C Technologies H3C WX3000 Series Unified Switches User Manual

Page 253: Aaa configuration

Advertising
background image

25-1

27

AAA Configuration

AAA Configuration Task List

Configuration Introduction

You need to configure AAA to provide network access services for legal users while protecting network
devices and preventing unauthorized access and repudiation behavior.

Complete the following tasks to configure a combined AAA scheme for an ISP domain:

Task

Remarks

Creating an ISP Domain and Configuring Its Attributes

Required

Configuring a combined AAA scheme

Required

None authentication

Local authentication

RADIUS authentication

Configuring an AAA
Scheme for an ISP
Domain

HWTACACS
authentication

z

Use one of the authentication
methods

z

You need to configure RADIUS or
HWATACACS before performing
RADIUS or HWTACACS
authentication

Configuring Dynamic VLAN Assignment

Optional

Configuring the Attributes of a Local User

Optional

AAA
configurati
on

Cutting Down User Connections Forcibly

Optional

Complete the following tasks to configure separate AAA schemes for an ISP domain:

Task

Remarks

Creating an ISP Domain and Configuring Its
Attributes

Required

Configuring separate AAA schemes

Required

Configuring an AAA Scheme for an ISP
Domain

Required

z

With separate AAA schemes, you can
specify authentication, authorization and
accounting schemes respectively.

z

You need to configure RADIUS or
HWATACACS before performing RADIUS
or HWTACACS authentication.

Configuring Dynamic VLAN Assignment

Optional

Configuring the Attributes of a Local User

Optional

AAA
configurati
on

Cutting Down User Connections Forcibly

Optional

Advertising