Configuring An Aaa Accounting Scheme For An Isp Domain - 3Com MSR 50 Series Configuration Manual

1766 C 93: AAA/RADIUS/HWTACACS C
HAPTER
Configuring an AAA
Accounting Scheme for
an ISP Domain
ONFIGURATION
authentication, you must use the same scheme setting for authorization and
authentication; otherwise, the system will prompt you with an error message.
In AAA, accounting is a separate process at the same level as authentication and
authorization. Its responsibility is to send accounting start/update/end requests to
the specified accounting server. Accounting is not required, and therefore
accounting scheme configuration is optional. If you do not perform any
accounting configuration, the system-default domain uses the local accounting
scheme.
Before configuring an authorization scheme, complete these three tasks:
1 For RADIUS or HWTACACS accounting, configure the RADIUS or HWTACACS
scheme to be referenced first. The local and none authentication modes do not
require any scheme.
2 Determine the access mode or service type to be configured. With AAA, you can
configure an accounting scheme specifically for each access mode and service
type, limiting the accounting protocols that can be used for access.
3 Determine whether to configure an accounting scheme for all access modes or
service types.
Follow these steps to configure an AAA accounting scheme for an ISP domain:
To do...
Enter system view
Create an ISP domain and
enter ISP domain view
Enable the accounting
optional feature
Specify the default accounting
scheme for all types of users
Specify the accounting
scheme for LAN access users
Specify the accounting
scheme for login users
Specify the accounting
scheme for Portal users
Use the command...
system-view
domain isp-name
accounting optional
accounting default
{ hwtacacs-scheme
hwtacacs-scheme-name
[ local ] | local | none |
radius-scheme
radius-scheme-name
[ local ] }
accounting lan-access
{ local | none |
radius-scheme
radius-scheme-name
[ local ] }
accounting login
{ hwtacacs-scheme
hwtacacs-scheme-name
[ local ] | local | none |
radius-scheme
radius-scheme-name
[ local ] }
accounting portal { none |
radius-scheme
radius-scheme-name }
Remarks
-
Required
Optional
Disabled by default
Optional
Local by default
Optional
The default accounting
scheme is used by default.
Optional
The default accounting
scheme is used by default.
Optional
The default accounting
scheme is used by default.