Enabling And Disabling - 3Com 3032 Configuration Manual

534 C 38: C
HAPTER ONFIGURING

Enabling and Disabling

AAA
Configuring the
Authentication Method
List for Login Users
AAA RADIUS P
AND ROTOCOL
Assigning an IP Address for a PPP User
Configuring a Local User Database
Configure RADIUS Server
Please perform the following configurations in the system view.
Table 599 Enable/Disable AAA
Operation
Enable AAA
Disable AAA
By default, AAA is disabled.
An authentication method list defines the authentication methods, including the
authentication types, which can be executed, and their execution sequence. This
list is used in sequence to authenticate users.
Login users are divided into FTP users and EXEC users. EXEC means logging on the
router through Telnet or other methods, such as the console port, asynchronous
serial port, telnet, X.25 PAD calling, for router configuration. The two types of
users have to be authorized in a local user database with the command
local-user service-type
authorization details for the corresponding user (defining user name and
password) should be set on the RADIUS server, before it is started.
Perform the following configuration in system view.
Table 600 Configure AAA Login Authentication
Operation
Configure login authentication method list
of AAA
Delete login authentication method list of
AAA
By default, the login method list is
.
local
If the user does not define the
method list will be used.
Method here refers to the authentication method. The Authentication method
includes the following:
radius --- authentication with the RADIUS server
local --- local authentication
none --- access authority to all users without authentication
While configuring the authentication method list, at least one authentication
method should be designated. If multiple authentication methods are designated,
then at the time of login authentication, if there is no response to the preceding
Command
aaa-enable
undo aaa-enable
. If a RADIUS server is used for authentication, the
Command
aaa authentication-scheme login {
default | methods-list } [ template
server-template-name ] [ method1 ] [
method2 ]...
undo aaa authentication-scheme login
{ default | methods-list }
aaa authentication-scheme login default
, the execution sequence of default
methods-list