Configuring aaa, Aaa overview, Configuration prerequisites – H3C Technologies H3C WX3000E Series Wireless Switches User Manual
Page 422
406
Configuring AAA
The web interface supports configuring Internet Service Provider (ISP) domains and configuring AAA
methods for ISP domains.
AAA overview
Authentication, Authorization, and Accounting (AAA) provides a uniform framework for implementing
network access management. It provides the following security functions:
•
Authentication—Identifies users and determines whether a user is valid.
•
Authorization—Grants different users different rights and controls their access to resources and
services. For example, a user who has successfully logged in to the device can be granted read and
print permissions to the files on the device.
•
Accounting—Records all network service usage information of users, including the service type,
start time, and traffic. The accounting function not only provides the information required for
charging, but also allows for network security surveillance.
AAA usually uses a client/server model. The client runs on the network access server (NAS) and the
server maintains user information centrally. In an AAA network, a NAS is a server for users but a client
for the AAA servers.
Figure 435 Network diagram for AAA
AAA can be implemented through multiple protocols. The device supports using RADIUS, the most
commonly used protocol in practice. For more information about RADIUS, see "
."
For more information about AAA and ISP, see H3C WA Series WLAN Access Points Security
Configuration Guide.
Configuring AAA
Configuration prerequisites
•
To deploy local authentication, configure local users on the access device as described in
"
."