Configuring Aaa Accounting Methods For An Isp Domain - HP 5120 EI Switch Series Configuration Manual

Determine whether to configure an authorization method for all access modes or service types.
3.
Follow these steps to configure AAA authorization methods for an ISP domain:
To do...
Enter system view
Enter ISP domain view
Specify the default
authorization method for all
types of users
Specify the command
authorization method
Specify the authorization
method for LAN users
Specify the authorization
method for login users
Specify the authorization
method for portal users
NOTE:

The authorization method specified with the authorization default command is for all types of users and has a
priority lower than that for a specific access mode.

RADIUS authorization is special in that it takes effect only when the RADIUS authorization scheme is the same as
the RADIUS authentication scheme. In addition, if a RADIUS authorization fails, the error message returned to
the NAS says that the server is not responding.

With the radius-scheme
none ] keyword and argument combination configured, local authorization or no authorization is the backup
method and is used only when the remote server is not available.

If you specify only the local or none keyword in an authorization method configuration command, the device
has no backup authorization method and performs only local authorization or does not perform any
authorization.

The authorization information from the RADIUS server is sent to the RADIUS client along with the authentication
response message. You cannot specify a separate RADIUS authorization server. If you use RADIUS for
authorization and authentication, you must use the same scheme setting for authorization and authentication;
otherwise, the system will display an error message.

Configuring AAA accounting methods for an ISP domain

In AAA, accounting is a separate process at the same level as authentication and authorization. Its
responsibility is to send accounting start/update/end requests to the specified accounting server.
Accounting is not required, and accounting method configuration is optional.
AAA supports the following accounting methods:
No accounting (none)—The system does not perform accounting for the users.

Use the command...
system-view
domain isp-name
authorization default { hwtacacs-scheme
hwtacacs-scheme-name [ local ] | local |
none | radius-scheme radius-scheme-name
[ local ] }
authorization command { hwtacacs-scheme
hwtacacs-scheme-name [ local | none ] |
local | none }
authorization lan-access { local | none |
radius-scheme radius-scheme-name [ local
| none ] }
authorization login { hwtacacs-scheme
hwtacacs-scheme-name [ local ] | local |
none | radius-scheme radius-scheme-name
[ local ] }
authorization portal { local | none |
radius-scheme radius-scheme-name [ local
] }
radius-scheme-name
local, or hwtacacs-scheme
40
Remarks
—
—
Optional
local by default
Optional
The default authorization
method is used by default.
Optional
The default authorization
method is used by default.
Optional
The default authorization
method is used by default.
Optional
The default authorization
method is used by default.
hwtacacs-scheme-name
[ local |