H3C Technologies H3C S3100 Series Switches - Manual (Page 309)

Operation Manual – AAA – RADIUS – HWTACACS
H3C S3100-52P Ethernet Switch
Chapter 1 AAA & RADIUS & HWTACACS
Configuration
1-10
8) The TACACS server returns an authorization response, indicating that the user
has passed the authorization.
9) After receiving the response indicating an authorization success, the TACACS
client pushes the configuration interface of the switch to the user.
10) The TACACS client sends an accounting start request to the TACACS server.
11) The TACACS server returns an accounting response, indicating that it has
received the accounting start request.
12) The user logs out; the TACACS client sends an accounting stop request to the
TACACS server.
13) The TACACS server returns an accounting response, indicating that it has
received the accounting stop request.
1.2 Configuration Task
Table 1-4
Configuration tasks
Configuration task Description Related section
Creating an
ISP domain
Required
Section 1.3.2
“Creating an ISP
Domain”
Configuring the
attributes of an
ISP domain
Optional
Section 1.3.3
“Configuring the
Attributes of an ISP
Domain”
Configuring an
AAA scheme
for an ISP
domain
Required
If local authentication is
adopted, refer to section
1.3.6 “Configuring the
Attributes of a Local
User”.
If RADIUS authentication
is adopted, refer to
section 1.4 “RADIUS
Configuration”.
Section 1.3.4
“Configuring an AAA
Scheme for an ISP
Domain”
Configuring
dynamic VLAN
assignment
Optional
Section 1.3.5
“Configuring Dynamic
VLAN Assignment”
Configuring the
attributes of a
local user
Optional
Section 1.3.6
“Configuring the
Attributes of a Local
User”
AAA
configuration
Cutting down
user
connections
forcibly
Optional
Section 1.3.7
“Cutting Down User
Connections Forcibly”