21
{ Local authentication—Configure local users and the related attributes, including the
usernames and passwords for the users to be authenticated.
{ Remote authentication—Configure the required RADIUS and HWTACACS schemes. You
must configure user attributes on the servers accordingly.
2. Configure AAA methods for the ISP domain.
{ Authentication method—No authentication (none), local authentication (local), or remote
authentication (scheme)
{ Authorization method—No authorization (none), local authorization (local), or remote
authorization (scheme)
{ Accounting method—No accounting (none), local accounting (local), or remote
accounting (scheme)
See Figure 10 for the config
uration procedure.
Figure 10 AAA configuration procedure
Table 5 AAA configuration task list
Task Remarks
Configuring AAA
schemes
Configuring local users
Req
uired.
Complete at least
one task.
Configuring RADIUS schemes
Configuring HWTACACS schemes
Configuring AAA
methods for ISP domains
Creating an ISP domain
Req
uired.
Configuring ISP domain attributes
Optional.
Configuring authentication methods for an ISP domain
Required.
Complete at least
one task.
Configuring authorization methods for an ISP domain
Configuring accounting methods for an ISP domain
Tearing down user connections
Optional.
Configuring a NAS ID-VLAN binding
Optional.