H3C S9500 Series Operation Manual page 1146

Operation Manual – AAA RADIUS HWTACACS
H3C S9500 Series Routing Switches
Chapter 1 AAA, RADIUS and HWTACACS Protocol
When configuring AAA, RADIUS and HWTACACS, go to these sections for information
you are interested in:
AAA, RADIUS and HWTACACS Protocol Overview
AAA Configuration
RADIUS Protocol Configuration
HWTACACS Protocol Configuration
Displaying and Maintaining AAA and RADIUS Protocol
AAA, RADIUS, and HWTACACS Protocol Configuration Examples
Troubleshooting AAA, RADIUS, and HWTACACS
1.1 AAA, RADIUS and HWTACACS Protocol Overview
1.1.1 AAA Overview
Authentication, Authorization and Accounting (AAA) provide a uniform framework used
for configuring these three security functions to implement the network security
management.
The network security mentioned here refers to access control and it includes:
Which user can access the network servers?
Which services can the authorized user enjoy?
How to charge the user who is using network resources?
Accordingly, AAA shall provide the following services:
Authentication: authenticates if the user can access the network server.
Authorization: authorizes the user with specified services.
Accounting: traces network resources consumed by the user.
Generally, AAA adopts Client/Server architecture, with its client running at the managed
side and its server centralizes and stores the user information. Therefore AAA
framework takes good scalability, and is easy to realize the control and centralized
management of user information.
1.1.2 RADIUS Protocol Overview
As mentioned above, AAA is a management framework, so it can be implemented by
some protocols. RADIUS is such a protocol frequently used.
Configuration
1-1
Chapter 1 AAA, RADIUS and HWTACACS
Protocol Configuration