Configuring Aaa; Configuration Prerequisites; Creating An Isp Domain - 3Com MSR 50 Series Configuration Manual

Configuring AAA

Configuration
Prerequisites

Creating an ISP Domain

Task
"Setting the Upper Limit of RADIUS Request Retransmission Attempts"
on page 1772
"Setting the Supported RADIUS Server Type" on page 1772
"Setting the Status of RADIUS Servers" on page 1772
"Configuring Attributes Related to the Data Sent to the RADIUS Server"
on page 1773
"Setting Timers Regarding RADIUS Servers" on page 1774
"Configuring RADIUS Accounting-on" on page 1775
"Configuring an IP Address for the Security Policy Server" on page 1776
"Enabling the Listening Port of the RADIUS Client" on page 1776
HWTACACS configuration task list
Task
"Creating a HWTACACS scheme" on page 1777
"Specifying the HWTACACS Authentication Servers" on page 1777
"Specifying the HWTACACS Authorization Servers" on page 1777
"Specifying the HWTACACS Accounting Servers" on page 1778
"Setting the Shared Key for HWTACACS Packets" on page 1779
"Configuring Attributes Related to the Data Sent to the TACACS Server"
on page 1779
"Setting Timers Regarding HWTACACS Servers" on page 1780
By configuring AAA, you can provide network access service for legal users,
protect the networking devices, and avoid unauthorized access and bilking. In
addition, you can configure ISP domains to perform AAA on accessing users.
In AAA, users are divided into LAN-access users (such as 802.1x users and MAC
authentication users), login users (such as SSH, Telnet, FTP, and terminal access
users), Portal users, PPP users, VoIP users, command line users (that is, command
line authentication users). Except for command line users, you can configure
separate authentication/authorization/accounting policies for all the other type of
users. Command line users can be configured with authorization policy
independently.
For remote authentication, authorization, or accounting, you must create the
RADIUS or HWTACACS scheme first.
RADIUS scheme: Reference a configured RADIUS scheme to implement
■
authentication/authorization and accounting. For RADIUS scheme
configuration, refer to
HWTACACS scheme: Reference a configured HWTACACS scheme to
■
implement authentication/authorization and accounting. For HWTACACS
scheme configuration, refer to
For the NAS, each accessing user belongs to an ISP domain. Up to 16 ISP domains
can be configured on a NAS. If a user does not provide the ISP domain name, the
system considers that the user belongs to the default ISP domain.
"Configuring RADIUS" on page
"Configuring HWTACACS" on page
Configuring AAA 1761
Remarks
Optional
Optional
Optional
Optional
Optional
Optional
Optional
Optional
Remarks
Required
Required
Optional
Optional
Required
Optional
Optional
1769.
1777.