To Next Page

To Previous Page

Operation Manual – AAA

H3C S3100 Series Ethernet Switches Table of Contents

Table of Contents

Chapter 1 AAA Overview.............................................................................................................. 1-1

1.1 Introduction to AAA............................................................................................................ 1-1

1.1.1 Authentication..........................................................................................................1-1

1.1.2 Authorization ........................................................................................................... 1-1

1.1.3 Accounting............................................................................................................... 1-2

1.1.4 Introduction to ISP Domain ..................................................................................... 1-2

1.2 Introduction to AAA Services............................................................................................. 1-2

1.2.1 Introduction to RADIUS........................................................................................... 1-2

1.2.2 Introduction to HWTACACS.................................................................................... 1-8

Chapter 2 AAA Configuration ...................................................................................................... 2-1

2.1 AAA Configuration Task List.............................................................................................. 2-1

2.1.1 Configuration introduction ....................................................................................... 2-1

2.1.2 Creating an ISP Domain and Configuring Its Attributes.......................................... 2-2

2.1.3 Configuring an AAA Scheme for an ISP Domain.................................................... 2-4

2.1.4 Configuring Dynamic VLAN Assignment ................................................................ 2-7

2.1.5 Configuring the Attributes of a Local User .............................................................. 2-8

2.1.6 Cutting Down User Connections Forcibly ............................................................. 2-10

2.2 RADIUS Configuration Task List ..................................................................................... 2-11

2.2.1 Creating a RADIUS Scheme................................................................................. 2-13

2.2.2 Configuring RADIUS Authentication/Authorization Servers.................................. 2-13

2.2.3 Configuring RADIUS Accounting Servers............................................................. 2-14

2.2.4 Configuring Shared Keys for RADIUS Messages................................................. 2-16

2.2.5 Configuring the Maximum Number of RADIUS Request Transmission

Attempts........................................................................................................................

2-17

2.2.6 Configuring the Type of RADIUS Servers to be Supported.................................. 2-18

2.2.7 Configuring the Status of RADIUS Servers ..........................................................2-18

2.2.8 Configuring the Attributes of Data to be Sent to RADIUS Servers ....................... 2-19

2.2.9 Configuring the Local RADIUS Authentication Server Function........................... 2-20

2.2.10 Configuring Timers for RADIUS Servers ............................................................2-21

2.2.11 Enabling Sending Trap Message when a RADIUS Server Goes Down............. 2-23

2.2.12 Enabling the User Re-Authentication at Restart Function .................................. 2-23

2.3 HWTACACS Configuration Task List .............................................................................. 2-25

2.3.1 Creating a HWTACACS Scheme.......................................................................... 2-25

2.3.2 Configuring TACACS Authentication Servers....................................................... 2-26

2.3.3 Configuring TACACS Authorization Servers......................................................... 2-26

2.3.4 Configuring TACACS Accounting Servers............................................................ 2-27

2.3.5 Configuring Shared Keys for HWTACACS Messages.......................................... 2-28

H3C S3100 8C SI User Manual

Questions and Answers: