Aaa Tasks At A Glance - H3C SR8800-F Configuration Manual

•
RFC 2251, Lightweight Directory Access Protocol (v3)

AAA tasks at a glance

To configure AAA, complete the following tasks on the NAS:
1. Configure the required AAA schemes:
If local authentication is used, configure local users and the related attributes.
If remote authentication is used, configure the required RADIUS, HWTACACS, or LDAP
schemes.
2. Configure AAA methods for the users' ISP domains, including none, local, scheme, or any
combination of them.
Figure 11 AAA configuration procedure
No AAA
To configure AAA, perform the following tasks:
Tasks at a glance
(Required.) Perform a minimum one of the following tasks to configure local users or AAA schemes:
•
Configuring local users
•
Configuring RADIUS
•
Configuring HWTACACS
•
Configuring LDAP
(Required.) Configure AAA methods for ISP domains:
1. (Required.)
2. (Optional.)
3. (Required.) Perform a minimum one of the following tasks to configure AAA authentication,
authorization, and accounting methods for the ISP domain:
Configuring authentication methods for an ISP domain
Configuring authorization methods for an ISP domain
Configuring accounting methods for an ISP domain
(Optional.)
(Optional.)
(Optional.)
Local AAA
Configure local users and related
attributes
Create an ISP domain
and enter ISP domain
view
Configure the RADIUS, HWTACACS,
or LDAP schemes to be used
Remote AAA
Creating an ISP domain
Configuring ISP domain attributes
Setting the maximum number of concurrent login users
Configuring the local bill cache feature
Configuring a NAS-ID
Configure AAA methods for
different types of users or/and
the default methods for all
types of users
Authentication method
+
Authorization method
+
Accounting method
14
none/ local (the default)/scheme
none/ local (the default)/scheme
none/ local (the default)/scheme