Configuration Guide Configuring AAA
Searches for the user domain according to the domain name.
Searches for the corresponding AAA method list name according to the domain configuration information on the NAS.
Searches for the corresponding method list according to the method list name.
Provides the AAA services based on the method list.
If any of the preceding procedures fails, the AAA services cannot be provided.
Figure 2-4 shows the typical multi-domain topology.
Figure 2-4
Related Configuration
Enabling AAA
By default, AAA is disabled.
To enable AAA, run the aaa new-model command.
Configuring an AAA Method List
By default, no AAA method list is configured.
For details, see section 5.2.1, section 5.2.2, and section 5.2.3.
Enabling the Domain-Based AAA Service
By default, the domain-based AAA service is disabled.
To enable the domain-based AAA service, run the aaa domain enable command.
Creating a Domain
By default, no domain is configured.
To configure a domain, run the aaa domain domain-name command.
Configuring an AV Set for a Domain
By default, no domain AV set is configured.
A domain AV set contains the following elements: AAA method lists, the maximum number of online users, whether to
remove the domain name from the username, and whether the domain name takes effect.
Displaying Domain Configuration