Configuring AAA 763
n
■ With the accounting optional command configured, a user that will be
disconnected otherwise can use the network resources even when there is no
available accounting server or the communication with the current accounting
server fails.
■ The accounting scheme specified with the accounting default command is
for all types of users and has a priority lower than that for a specific access
mode.
■ With the radius-scheme radius-scheme-name local or hwtacacs-scheme
hwtacacs-scheme-name local keyword and argument combination configured,
the local scheme is the backup scheme and is used only when the RADIUS
server or HWTACACS server is not available.
■ If the primary accounting scheme is local or none, the system performs local
accounting or does not perform any accounting, rather than uses the RADIUS
or HWTACACS scheme.
■ With the access mode of login, accounting is not supported for FTP services.
Configuring Local User
Attributes
For local authentication, you must create a local user and configure the attributes.
A local user represents a set of users configured on a device, which are uniquely
identified by the username. For a user requesting network service to pass local
authentication, you must add an entry as required in the local user database of the
device.
Follow these steps to configure the attributes for a local user:
Specify the accounting
scheme for login users
accounting login
{ hwtacacs-scheme
hwtacacs-scheme-name
[ local ] | local | none |
radius-scheme
radius-scheme-name
[ local ]}
Optional
The default accounting
scheme is used by default.
To do… Use the command… Remarks
To do… Use the command… Remarks
Enter system view system-view -
Set the password display mode
for all local users
local-user
password-display-mode
{ auto | cipher-force }
Optional
auto by default
Add a local user and enter local
user view
local-user user-name Required
No local user is configured
by default
Configure a password for the
local user
password { cipher | simple }
password
Required
Place the local user to the state
of active or blocked
state { active | block } Optional
When created, a local user is
in the state of active by
default, and the user can
request network services.
To Next Page
Loading...
