Configuring Aaa Methods For Isp Domains; Configuration Prerequisites - H3C S5500-EI Series Security Configuration Manual

Hide thumbs Also See for S5500-EI Series:
Table of Contents

Advertisement

Step
5.
Set the real-time accounting
interval.
NOTE:
Consider the performance of the NAS and the HWTACACS server when you set the real-time accounting
interval. A shorter interval requires higher performance. A shorter interval requires higher performance.
Displaying and maintaining HWTACACS
Task
Display the configuration information
or statistics of HWTACACS schemes.
Display information about buffered
stop-accounting requests for which no
responses have been received.
Clear HWTACACS statistics.
Clear buffered stop-accounting
requests that get no responses.

Configuring AAA methods for ISP domains

You configure AAA methods for an ISP domain by referencing configured AAA schemes in ISP domain
view. Each ISP domain has a set of default AAA methods, which are local authentication, local
authorization, and local accounting by default and can be customized. If you do not configure any AAA
methods for an ISP domain, the switch uses the system default AAA methods for authentication,
authorization, and accounting of the users in the domain.

Configuration prerequisites

To use local authentication for users in an ISP domain, configure local user accounts (see
local user
attributes") on the switch.
To use remote authentication, authorization, and accounting, create the required RADIUS, and
HWTACACS, schemes as described in
schemes".
Command
timer realtime-accounting minutes
Command
display hwtacacs
[ hwtacacs-server-name [ statistics ] ]
[ slot slot-number ] [ | { begin | exclude |
include } regular-expression ]
display stop-accounting-buffer
hwtacacs-scheme
hwtacacs-scheme-name [ slot
slot-number ] [ | { begin | exclude |
include } regular-expression ]
reset hwtacacs statistics { accounting |
all | authentication | authorization }
[ slot slot-number ]
reset stop-accounting-buffer
hwtacacs-scheme
hwtacacs-scheme-name [ slot
slot-number ]
"Configuring RADIUS
40
Remarks
Optional.
The default real-time accounting
interval is 12 minutes.
Remarks
Available in any view
Available in any view
Available in user view
Available in user view
schemes,"
"Configuring HWTACACS
"Configuring

Advertisement

Table of Contents
loading

This manual is also suitable for:

S5500-si series

Table of Contents