Configuration Guide Configuring AAA
Mandatory.
Run the aaa new-model command to enable AAA.
By default, AAA is disabled.
Enabling the Domain-Based AAA Service
Mandatory.
Run the aaa domain enable command to enable the domain-based AAA service.
By default, the domain-based AAA service is disabled.
Creating a Domain and Entering Domain Configuration Mode
Mandatory.
Run the aaa domain command to create a domain or enter the configured domain.
By default, no domain is configured.
Associating the Domain with an 802.1X Authentication Method List
Run the authentication dot1x command to associate the domain with an 802.1X authentication method list.
This configuration is mandatory if you need to apply a specified 802.1X authentication method list to the domain.
Currently, the domain-based AAA service is applicable only to 802.1X access.
Associating the Domain with a Network Accounting Method List
Run the accounting network command to associate the domain with a network accounting method.
This configuration is mandatory if you need to apply a specified network accounting method list to the domain.
If a domain is not associated with a network accounting method list, by default, the global default method list is used for
accounting.
Associating the Domain with a Network Authorization Method List
Run the authorization network command to associate the domain with a network authorization method list.
This configuration is mandatory if you need to apply a specified network authorization method list to the domain.
If a domain is not associated with a network authorization method list, by default, the global default method list is used
for authorization.
Configuring the Domain Status
Optional.
When a domain is in Block state, the users in the domain cannot log in.
By default, after a domain is created, its state is Active, indicating that all the users in the domain are allowed to request
network services.
To Next Page
Loading...
Need help?
General
