Operation Manual – AAA
H3C S3100 Series Ethernet Switches Chapter 2 AAA Configuration
2-4
z The self-service server location function needs the cooperation of a RADIUS
server that supports self-service, such as comprehensive access management
server (CAMS). Through self-service, users can manage and control their account
or card numbers by themselves. A server installed with self-service software is
called a self-service server.
 Note:
H3C's CAMS Server is a service management system used to manage networks and
ensure network and user information security. With the cooperation of other networking
devices (such as switches) in a network, a CAMS server can implement the AAA
functions and right management.
2.1.3 Configuring an AAA Scheme for an ISP Domain
You can configure either of the following AAA schemes:
I. Configuring a combined AAA scheme
You can use the scheme command to specify an AAA scheme for an ISP domain. If
you specify a RADIUS or HWTACACS scheme, the authentication, authorization and
accounting will be uniformly implemented by the RADIUS or TACACS server(s)
specified in the RADIUS or HWTACACS scheme. In this way, you cannot specify
different schemes for authentication, authorization and accounting respectively.
Table 2-4 Configure a combined AAA scheme
Operation Command Remarks
Enter system view
system-view
—
Create an ISP domain
and enter its view, or enter
the view of an existing ISP
domain
domain isp-name
Required
Configure an AAA
scheme for the ISP
domain
scheme { local | none |
radius-scheme
radius-scheme-name [ local ] |
hwtacacs-scheme
hwtacacs-scheme-name [ local ] }
Required
By default, an ISP
domain uses the
local AAA
scheme.