17
AAA configuration considerations and task list
To configure AAA, complete the following tasks on the NAS:
1. Configure the required AAA schemes.
 Local authentication—Configure local users and the related attributes, including the
usernames and passwords, for the users to be authenticated.
 Remote authentication—Configure the required RADIUS, HWTACACS, and LDAP
schemes.
2. Configure AAA methods for the users' ISP domains. To use remote AAA methods, you must
specify the configured RADIUS, HWTACACS, or LDAP schemes in the ISP domains.
Figure 10 AAA configuration procedure
To configure AAA, perform the following tasks:
(Required.) Perform at least one of the following tasks to configure local users or AAA schemes:
• Configuring local users
• Configuring RADIUS schemes
• Configuring HWTACACS schemes
• Configuring LDAP schemes
(Required.) Configure AAA methods for ISP domains:
1. (Required.) Creating an ISP domain
2. (Optional.) Configuring ISP domain attributes
3. (Required.) Perform at least one of the following tasks to configure AAA authentication, authorization,
and accounting methods for the ISP domain:
ï‚¡ Configuring authentication methods for an ISP domain
ï‚¡ Configuring authorization methods for an ISP domain
ï‚¡ Configuring accounting methods for an ISP domain
(Optional.) Enabling the session-control feature
(Optional.) Setting the maximum number of concurrent login users
(Optional.) Configuring a NAS-ID profile
C
onfigure the RADIUS, HWTACACS,
or LDAP schemes
to be used
none
/ local (
the default)/scheme
Authorization method
Accounting method
Configure AAA methods for
different types of users or/and
the default methods for all
types of users
Create an ISP domain
and enter ISP domain
view
Authentication method
Configure local users and related
attributes
none/ local
(the default
)/scheme
+
+
Local AAA
Remote AAA
No AAA
none/ local (the default)/
scheme
To Next Page
Loading...
Need help?
General