Table of Contents
Advertisement
AAA can be implemented through multiple protocols. The switch supports using RADIUS, which is the most
commonly used protocol in practice. For more information, see the chapter "RADIUS configuration."
Domain-based user management
On a NAS, each user belongs to one Internet service provider (ISP) domain. A NAS determines the ISP
domain a user belongs to by the username entered by the user at login, and controls access of the user
based on the AAA methods configured for the domain. If no specific AAA methods are configured for the
domain, the default methods are used. See a.
Determine the ISP domain of a user by the username
a.
Configuring AAA
Configuration prerequisites
To implement local user authentication, authorization, and accounting, you must create local users and
configure user attributes on the switch. See the chapter "User configuration".
To implement remote authentication, authorization, or accounting, you must create the RADIUS schemes to
be referenced. For RADIUS scheme configuration information, see the chapter "RADIUS configuration".
Configuration task list
Task
Configuring an ISP domain
Remarks
Optional
Create ISP domains and specify one of them as the default ISP domain.
By default, there is a system predefined ISP domain named system, which is the
default ISP domain.
352
Hide quick links:
Advertisement
Table of Contents
