Contents
Configuring AAA ·············································································· 1
Overview ·································································································································· 1
RADIUS ···························································································································· 2
HWTACACS ······················································································································ 7
LDAP ································································································································ 9
AAA for MPLS L3VPNs ······································································································ 14
Protocols and standards ····································································································· 14
RADIUS attributes ············································································································· 15
FIPS compliance······················································································································ 18
Configuring AAA schemes ········································································································· 19
Configuring local users ······································································································· 20
Configuring LDAP schemes ································································································· 42
Creating an ISP domain ······································································································ 46
AAA configuration examples ······································································································· 58
Troubleshooting RADIUS ··········································································································· 76
RADIUS accounting error ···································································································· 77
Troubleshooting HWTACACS ····································································································· 78
Troubleshooting LDAP ·············································································································· 78
802.1X overview ············································································ 79
802.1X architecture ·················································································································· 79
802.1X-related protocols ············································································································ 80
Packet formats ·················································································································· 80
EAP over RADIUS ············································································································· 81
i