Chapter 1 Aaa&Radius Configuration; Introduction To Aaa - Huawei Quidway S3100 Series Operation Manual

Operation Manual – AAA&RADIUS
Quidway S3100 Series Ethernet Switches
Chapter 1 AAA&RADIUS Configuration
1.1 Overview

1.1.1 Introduction to AAA

AAA is shortened from the three security functions: authentication, authorization and
accounting. It provides a uniform framework for you to configure the three security
functions to implement the network security management.
The network security mentioned here mainly refers to access control. It mainly controls:
Which users can access the network
Which services the users having access right can enjoy, and
How to perform accounting for the users who are using network resources.
Accordingly, AAA provides the following services:
I. Authentication
AAA supports the following authentication methods:
None authentication: Users are trusted and are not authenticated. Generally, this
method is not recommended.
Local authentication: User information (including user name, password, and
attributes) is configured on this device. Local authentication is fast and requires
lower operational cost. But the information storage capacity is limited by device
hardware.
Remote authentication: Users are authenticated remotely through the RADIUS
protocol (both standard and extended RADIUS protocols can be used). This
device (for example, a Quidway series switch) acts as the client to communicate
with the RADIUS server.
II. Authorization
AAA supports the following authorization methods:
Direct authorization: Users are trusted and directly authorized.
Local authorization: Users are authorized according to the related attributes
configured for their local accounts on the device.
RADIUS authorization: Users are authorized after they pass the RADIUS
authentication. The authentication and authorization of RADIUS protocol are
bound together, and you cannot perform RADIUS authorization alone without
RADIUS authentication.
Huawei Technologies Proprietary
1-1
Chapter 1 AAA&RADIUS Configuration