Configuration Guide Configuring AAA
2 Configuring AAA
2.1 Overview
Authentication, authorization, and accounting (AAA) provides a unified framework for configuring the authentication,
authorization, and accounting services. Ruijie Networks devices support the AAA application.
AAA provides the following services in a modular way:
Authentication: Refers to the verification of user identities for network access and network services. Authentication is
classified into local authentication and authentication through Remote Authentication Dial In User Service (RADIUS) and
Terminal Access Controller Access Control System+ (TACACS+).
Authorization: Refers to the granting of specific network services to users according to a series of defined attribute-value (AV)
pairs. The pairs describe what operations users are authorized to perform. AV pairs are stored on network access servers
(NASs) or remote security servers.
Accounting: Refers to the tracking of the resource consumption of users. When accounting is enabled, NASs collect statistics
on the network resource usage of users and send them in AV pairs to security servers. The records will be stored on security
servers, and can be read and analyzed by dedicated software to realize the accounting, statistics, and tracking of network
resource usage.
AAA is the most fundamental method of access control. Ruijie Networks also provides other simple access control functions,
such as local username authentication and online password authentication. Compared to them, AAA offers higher level of
network security.
AAA has the following advantages:
Robust flexibility and controllability
Scalability
Standards-compliant authentication
Multiple standby systems
2.2 Applications
Configuring AAA in a Single-Domain
Environment
AAA is performed for all the users in one domain.
Configuring AAA in a Multi-Domain
Environment
AAA is performed for the users in different domains by using different methods.
To Next Page
Loading...
Need help?
General
