Aaa Configuration - 3Com 8807 Configuration Manual

AAA Configuration

Creating/Deleting an ISP
Domain
Figure 62 Network diagram for using RADIUS to authenticate
PC user1
PC user2
Switch 8800
S3000 series
PC user3
Switch 8800
PC user4
S2000 series
The following sections describe AAA configuration tasks.
"Creating/Deleting an ISP Domain"
■
"Configuring Relevant Attributes of an ISP Domain"
■
"Configuring Self-Service Server URL"
■
"Creating/Deleting a Local User"
■
"Setting the Attributes of a Local User"
■
"Disconnecting a User by Force"
■
"Configuring Dynamic VLAN Delivering"
■
Among the above configuration tasks, creating ISP domain is compulsory;
otherwise the supplicant attributes cannot be distinguished. The other tasks are
optional. You can configure them at requirements.
What is Internet Service Provider (ISP) domain? To make it simple, ISP domain is a
group of users belonging to the same ISP. Generally, for a username in the
userid@isp-name format, taking gw20010608@3Com163.net as an example, the
isp-name (i.e. 3Com163.net) following the @ is the ISP domain name. When
3Com Series Switches control user access, as for an ISP user whose username is in
userid@isp-name format, the system will take userid part as username for
identification and take isp-name part as domain name.
The purpose of introducing ISP domain settings is to support the multi-ISP
application environment. In such environment, one access device might access
users of different ISP. Because the attributes of ISP users, such as username and
password formats, etc, may be different, it is necessary to differentiate them
through setting ISP domain. In 3Com Series Switches ISP domain view, you can
configure a complete set of exclusive ISP domain attributes on a per-ISP domain
basis, which includes AAA policy (RADIUS scheme applied etc.)
ISP1
Internet
ISP2
AAA Configuration 239
Authentication
Server
Accounting
Server1