2-1 
2  AAA Configuration 
AAA Configuration Task List 
Configuration introduction 
You need to configure AAA to provide network access services for legal users while protecting network 
devices and preventing unauthorized access and repudiation behavior. 
Table 2-1 AAA configuration tasks (configuring a combined AAA scheme for an ISP domain) 
Task  Remarks 
Creating an ISP Domain and Configuring 
Its Attributes
 
Required 
Configuring a combined AAA scheme  Required 
Configuring an AAA Scheme for an ISP 
Domain
 
Required 
z  You can configure a set of AAA 
schemes specific to different user 
access modes in an ISP domain. 
z  You need to configure RADIUS or 
HWATACACS before performing 
RADIUS or HWTACACS 
authentication. 
Configuring Dynamic VLAN Assignment  Optional 
Configuring the Attributes of a Local User Optional 
AAA 
configuration 
Cutting Down User Connections Forcibly  Optional 
 
Table 2-2 AAA configuration tasks (configuring separate AAA schemes for an ISP domain) 
Task  Remarks 
Creating an ISP Domain and Configuring 
Its Attributes
 
Required 
Configuring separate AAA schemes  Required 
Configuring an AAA Scheme for an ISP 
Domain
 
Required 
z  With separate AAA schemes, you 
can specify authentication, 
authorization and accounting 
schemes respectively.  
z  You need to configure RADIUS or 
HWATACACS before performing 
RADIUS or HWTACACS 
authentication. 
Configuring Dynamic VLAN Assignment  Optional 
AAA 
configuration 
Configuring the Attributes of a Local User  Optional