H3C Technologies H3C Intelligent Management Center - Manual (Page 305)

287
13 Configuring access devices
An access device provides Internet access for users. When users try to access the Internet, the access
device controls user network behaviors.
Access device configuration tasks
Access device configuration contains the following tasks:
1. Adding and configuring access devices.
Administrators add access devices UAM so that they can cooperate with UAM for user
authentication. UAM supports deploying authentication settings, including AAA configuration,
authentication port configuration, and commands to the access devices.
2. Configuring access device types.
Administrators define access device vendors, types, and proprietary RADIUS attributes in UAM.
With the configuration, UAM can better control access users that connect to access devices of
different vendors.
3. Configuring proprietary attribute assignment policies.
Administrators can define when to assign proprietary attributes and their attribute values.
A proprietary attribute assignment policy works in the following way:
a. The administrator defines proprietary attribute assignment policies in UAM.
b. The administrator assigns the proprietary attribute assignment policies to different access
scenarios in a service.
c. When authenticating an access user, UAM determines the access scenario for the user, and
sends the proprietary attributes and values contained in the matching proprietary attribute
assignment policy to the access device at proper time.
d. The access device uses the proprietary attributes and values to control user access.
Configuring access devices
Access devices cooperate with UAM to authenticate and authorize users. Add IPv4 and IPv6 devices to
UAM as access devices to exchange RADIUS packets with UAM.
The two types of access devices are:
• Standard—Standard access devices can use all UAM functions, because they support both
standard RADIUS attributes and HP-extended RADIUS attributes.
• Special—Special access devices support partial UAM functions. They may support some of the
standard RADIUS attributes, and may not support the HP-extended RADIUS attributes. However,
special access devices support other vendor-specific proprietary RADIUS attributes.
Most Cisco devices are special access devices.
To enable special access devices to use more UAM functions, add vendor-specific proprietary
attributes to UAM. For more information, see "
Configuring access device types ."