Configuration Guide Configuring AAA
The identity of trusted users is not checked. Normally, the no-authentication (None) method is not used.
Local authentication (local)
Authentication is performed on the NAS, which is configured with user information (including usernames, passwords, and AV
pairs). Before local authentication is enabled, run the username password command to create a local user database.
Remote server group authentication (group)
Authentication is performed jointly by the NAS and a remote server group through RADIUS or TACACS+. A server group
consists of one or more servers of the same type. User information is managed centrally on a remote server, thus realizing
multi-device centralized and unified authentication with high capacity and reliability. You can configure local authentication as
standby to avoid authentication failures when all the servers in the server group fail.
AAA Authentication Types
Ruijie products support the following authentication types:
Login authentication
Users log in to the command line interface (CLI) of the NAS for authentication through Secure Shell (SSH), Telnet, and File
Transfer Protocol (FTP).
Enable authentication
After users log in to the CLI of the NAS, the users must be authenticated before CLI permission update. This process is
called Enable authentication (in Privileged EXEC mode).
Point-to-Point Protocol (PPP) authentication
PPP authentication is performed for users that initiate dial-up access through PPP.
Dot1X (IEEE802.1X) authentication
Dot1X (IEEE802.1X) authentication is performed for users that initiate dial-up access through IEEE802.1X.
iPortal (built-in portal) authentication
iPortal authentication is performed by the first generation portal server.
Web (second generation portal) authentication
Web authentication is performed by the second generation portal server.
Related Configuration
Enabling AAA
By default, AAA is disabled.
To enable AAA, run the aaa new-model command.
Configuring an AAA Authentication Scheme
By default, no AAA authentication scheme is configured.
To Next Page
Loading...
Need help?
General
