Aaa Configuration - H3C S3610 Series Operation Manual

Operation Manual – AAA & RADIUS & HWTACACS
H3C S3610&S5510 Series Ethernet Switches
HWTACACS
configuration

1.3 AAA Configuration

The goal of AAA configuration is to protect network devices against unauthorized
access and at the same time provide network access services to authorized users. If
you need to use ISP domains to implement AAA management on access users, you
need to configure the ISP domains.
There are three types of users in AAA: login, command authorization, and lan-access.
You can configure authentication/authorization/accounting policies independently
according to the actual requirements of users.
Operation
Create
HWTACACS
scheme
Configure
HWTACACS
authentication
servers
Configure
HWTACACS
authorization
servers
Configure
HWTACACS
accounting
servers
Configure shared
keys for RADIUS
packets
Configure the
attributes for data
to be sent to
TACACS servers
Configure the
timers of TACACS
servers
1-14
Chapter 1 AAA & RADIUS & HWTACAC
Description
a
Required
Required
Required
Optional
Required
Optional
Optional
S Configuration
Related section
Section 1.5.1
"Creating a
HWTACACS
Scheme"
Section 1.5.2
"Configuring
HWTACACS
Authentication
Servers"
Section 1.5.3
"Configuring
HWTACACS
Authorization
Servers"
Section 1.5.4
"Configuring
HWTACACS
Accounting Servers"
Section 1.5.5
"Configuring Shared
Keys for RADIUS
Packets"
Section 1.5.6
"Configuring the
Attributes for Data to
be Sent to TACACS
Servers"
Section 1.5.7
"Configuring the
Timers of TACACS
Servers"