Aaa Configuration; Creating/Deleting An Isp Domain - H3C S9500 Series Operation Manual

Operation Manual – Security
H3C S9500 Series Routing Switches
S3000 series
PC user3
PC user4
S2000 series
Figure 2-3 Network diagram for using RADIUS to authenticate

2.2 AAA Configuration

The following sections describe AAA configuration tasks.

Creating/Deleting an ISP Domain

Configuring Relevant Attributes of an ISP Domain
Configuring Self-Service Server URL
Creating/Deleting a Local User
Setting the Attributes of a Local User
Disconnecting a User by Force
Configuring Dynamic VLAN Delivering
Among the above configuration tasks, creating ISP domain is compulsory; otherwise
the supplicant attributes cannot be distinguished. The other tasks are optional. You can
configure them at requirements.
2.2.1 Creating/Deleting an ISP Domain
What is Internet Service Provider (ISP) domain? To make it simple, ISP domain is a
group of users belonging to the same ISP. Generally, for a username in the
userid@isp-name format, taking gw20010608@H3C.net as an example, the isp-name
(i.e. H3C.net) following the @ is the ISP domain name. When H3C Series Switches
control user access, as for an ISP user whose username is in userid@isp-name format,
the system will take userid part as username for identification and take isp-name part as
domain name.
The purpose of introducing ISP domain settings is to support the multi-ISP application
environment. In such environment, one access device might access users of different
ISP. Because the attributes of ISP users, such as username and password formats, etc,
may be different, it is necessary to differentiate them through setting ISP domain. In
PC user1
PC user2
S8500 Series
S8500 Series
Chapter 2 AAA and RADIUS/HWTACACS
ISP1
Internet
ISP2
2-6
Protocol Configuration
Authentication
Server
Accounting
Server1