14
Hash value assigned after an 802.1X user passes authentication, which is
a 32-byte string. This attribute is stored in the user list on the device and is
used for verifying the handshake messages from the 802.1X user. This
attribute exists in only Access-Accept and Accounting-Request packets.
User groups assigned after the SSL VPN user passes authentication. A user
may belong to more than one user group. In this case, the user groups are
delimited by semi-colons. This attribute is used for cooperation with the SSL
VPN device.
Security level assigned after the SSL VPN user passes security
authentication
Bytes input within a real-time accounting interval
Bytes output within a real-time accounting interval
Packets input within an accounting interval, in the unit set on the device
Packets output within an accounting interval, in the unit set on the device
Result of bytes input within an accounting interval divided by 4G bytes
Output-Interval-
Gigawords
Result of bytes output within an accounting interval divided by 4G bytes
Backup source IP address for sending RADIUS packets
AAA configuration considerations and task list
To configure AAA, you must complete these tasks on the NAS:
1. Configure the required AAA schemes.
Local authentication—Configure local users and the related attributes, including the usernames and
passwords of the users to be authenticated.
Remote authentication—Configure the required RADIUS and HWTACACS schemes, and configure
user attributes on the servers accordingly.
2. Configure AAA methods for the users’ ISP domains.
Authentication method—No authentication (none), local authentication (local), or remote
authentication (scheme)
Authorization method—No authorization (none), local authorization (local), or remote authorization
(scheme)
Accounting method—No accounting (none), local accounting (local), or remote accounting
(scheme)
To Next Page
Loading...
