Configuring Aaa Schemes - HP MSR Series Configuration Manual

Figure 11 AAA configuration procedure
No AAA
To configure AAA, perform the following tasks:
Tasks at a glance
(Required.) Perform at least one of the following tasks to configure local users or AAA schemes:
•
Configuring local users
•
Configuring RADIUS schemes
•
Configuring HWTACACS schemes
•
Configuring LDAP schemes
(Required.) Configure AAA methods for ISP domains:
1. (Required.)
2. (Optional.)
3. (Required.) Perform at least one of the following tasks to configure AAA authentication, authorization,
and accounting methods for the ISP domain:
Configuring authentication methods for an ISP domain
Configuring authorization methods for an ISP domain
Configuring accounting methods for an ISP domain
(Optional.) Enabling the session-control feature
(Optional.) Configuring the RADIUS DAE server feature
(Optional.) Changing the DSCP priority for RADIUS packets
(Optional.) Setting the maximum number of concurrent login users
(Optional.) Configuring and applying an ITA policy
(Optional.) Configuring a NAS-ID profile
(Optional.) Configuring the Acct-Session-Id format

Configuring AAA schemes

This section includes information on configuring local users, RADIUS schemes, HWTACACS
schemes, and LDAP schemes.
Local AAA
Configure local users and related
attributes
Create an ISP domain
and enter ISP domain
view
Configure the RADIUS, HWTACACS,
or LDAP schemes to be used
Remote AAA
Creating an ISP domain
Configuring ISP domain attributes
Configure AAA methods for
different types of users or/and
the default methods for all
types of users
Authentication method
+
Authorization method
+
Accounting method
19
none/ local (the default)/scheme
none/ local (the default)/scheme
none/ local (the default)/scheme