Configuration Guide Configuring AAA
Before you configure an AAA authentication scheme, determine whether to use local authentication or remote server
authentication. If the latter is to be implemented, configure a RADIUS or TACACS+ server in advance. If local authentication
is selected, configure the local user database information on the NAS.
Configuring an AAA Authentication Method List
By default, no AAA authentication method list is configured.
Determine the access mode to be configured in advance. Then configure authentication methods according to the access
mode.
2.3.2 AAA Authorization
AAA authorization allows administrators to control the services or permissions of users. After AAA authorization is enabled,
the NAS configures the sessions of users according to the user configuration files stored on the NAS or servers. After
authorization, users can use only the services or have only the permissions permitted by the configuration files.
AAA Authorization Scheme
Direct authorization (none)
Direct authorization is intended for highly trusted users, who are assigned with the default permissions specified by the NAS.
Local authorization (local)
Local authorization is performed on the NAS, which authorizes users according to the AV pairs configured for local users.
Remote server-group authorization (group)
Authorization is performed jointly by the NAS and a remote server group. You can configure local or direct authorization as
standby to avoid authorization failures when all the servers in the server group fail.
AAA Authorization Types
EXEC authorization
After users log in to the CLI of the NAS, the users are assigned with permission levels (0 to 15).
Config-commands authorization
Users are assigned with the permissions to run specific commands in configuration modes (including the global configuration
mode and sub-modes).
Console authorization
After users log in through consoles, the users are authorized to run commands.
Command authorization
Authorize users with commands after login to the CLI of the NAS.
Network authorization
To Next Page
Loading...
Need help?
General
