16
Table 4 AAA configuration task list
Task Remarks
Configuring AAA
schemes
Configuring local users
Required.
Complete at le
ast one task.
Configuring RADIUS schemes
Configuring HWTACACS schemes
Configuring AAA
methods for ISP domains
Creating an ISP domain Required.
Configuring ISP domain attributes Optional.
Configuring AAA authentication methods for
an ISP domain
Required.
Complete at least one task.
Configuring AAA authorization methods for an
ISP domain
Configuring AAA accounting methods for an
ISP domain
Tearing down user connections Optional.
Configuring a NAS ID-VLAN binding Optional.
Specifying the device ID used in stateful failover mode Optional.
Configuring a switch as a RADIUS server Optional.
NOTE:
To use AAA methods to control access of login users, you must configure the user interfaces to use AAA b
using the authentication-mode command. For more information about the confi
uration command, see
Fundamentals Command Reference
.
Configuring AAA schemes
Configuring local users
To implement local user authentication, authorization, and accounting, you must create local users and
configure user attributes on the switch. The local users and attributes are stored in the local user database
on the switch. A local user is uniquely identified by a username. Configurable local user attributes are as
follows:
• Service type.
Types of services that the user can use. Local authentication checks the service types of a local user.
If none of the service types is available, the user cannot pass authentication.
Service types include FTP, LAN access, portal, SSH, Telnet, terminal, and Web.
• User state.
Indicates whether or not a local user can request network services. There are two user states: active
and blocked. A user in active state can request network services, but a user in blocked state
cannot.
• Maximum number of users using the same local user account.
Indicates how many users can use the same local user account for local authentication.
To Next Page
Loading...
Need help?
General
