3Com 3032 Configuration Manual page 540

536 C 38: C
HAPTER ONFIGURING
Configuring the
Local-First
Authentication of AAA
Configuring the AAA
Accounting Option
Configuring a Local IP
Address Pool
AAA RADIUS P
AND ROTOCOL
aaa authentication-scheme ppp default radius local
Different PPP authentication method lists can be configured for different
interfaces.
When local-first authentication is configured, the user is authenticated locally first.
If local authentication fails, then the authentication method configured in the
method list is used instead. Once local-first authentication is configured, it is
applied to all users using PPP and login.
Perform the following configurations in system view.
Table 602 Configure AAA Local-First Authentication
Operation
Enable local-first authentication
Disable local-first authentication
By default local-first authentication is disabled.
In case there is no available RADIUS accounting server or if communication with
the RADIUS accounting server fails, and if only
command is configured then the user is be disconnected and can still
optional
use the network resources.
Perform the following configurations in system view.
Table 603 Configure AAA Accounting Option
Operation
Turn on accounting option switch
Turn off accounting option switch
By default, the accounting option is disabled and users are charged. When the
method list designated by the user is none, accounting is unnecessary.
A local address pool is mainly used to assign an IP address for users who log in
remote PPP. If the end IP address of the pool is not specified when the IP address
pool is defined, there will be only one IP address in the address pool.
Perform the following configurations in system view.
Table 604 Configure Local IP Address Pool
Operation
Configure local IP address pool
Cancel local IP address pool
By default no address pool is defined by the system.
Command
aaa authentication-scheme
local-first
undo aaa authentication-scheme
local-first
aaa accounting-scheme
Command
aaa accounting-scheme-scheme
optional
undo aaa accounting-scheme-scheme
optional
Command
ip pool pool-number low-ip-address [
high-ip-address ]
undo ip pool pool-number