Configuring Aaa Accounting Methods For An Isp Domain - HP 12500 Series Configuration Manual

If you specify only the local or none keyword in an authorization method configuration command,
•
the switch has no backup authorization method and performs only local authorization or does not
perform any authorization.
To configure AAA authorization methods for an ISP domain:
Step
Enter system view.
1.
2. Enter ISP domain view.
3. Specify the default
authorization method for all
types of users.
4. Specify the command
authorization method.
5. Specify the authorization
method for LAN users.
6. Specify the authorization
method for login users.
7. Specify the authorization
method for portal users.

Configuring AAA accounting methods for an ISP domain

In AAA, accounting is a separate process at the same level as authentication and authorization. This
process sends accounting start/update/end requests to the specified accounting server. Accounting is
optional.
AAA supports the following accounting methods:
No accounting (none)—The system does not perform accounting for the users.
•
Local accounting (local)—Local accounting is implemented on the access device. It counts and
•
controls the number of concurrent users who use the same local user account; it does not provide
statistics for charging. The maximum number of concurrent users using the same local user account
is set by the access-limit command in local user view.
Command
system-view
domain isp-name
authorization default
{ hwtacacs-scheme
hwtacacs-scheme-name [ local ] |
local | none | radius-scheme
radius-scheme-name [ local ] }
authorization command
{ hwtacacs-scheme
hwtacacs-scheme-name [ local |
none ] | local | none }
authorization lan-access { local |
none | radius-scheme
radius-scheme-name [ local |
none ] }
authorization login
{ hwtacacs-scheme
hwtacacs-scheme-name [ local ] |
local | none | radius-scheme
radius-scheme-name [ local ] }
authorization portal { local | none
| radius-scheme
radius-scheme-name [ local ] }
48
Remarks
N/A
N/A
Optional.
The default setting is local.
The none keyword is not supported
in FIPS mode.
Optional.
The default authorization method is
used by default.
The none keyword is not supported
in FIPS mode.
Optional.
The default authorization method is
used by default.
The none keyword is not supported
in FIPS mode.
Optional.
The default authorization method is
used by default.
The none keyword is not supported
in FIPS mode.
Optional.
The default authorization method is
used by default.
The none keyword is not supported
in FIPS mode.