Configuring An Aaa Scheme For An Isp Domain - H3C S3100 8C SI Operation Manual

Operation Manual – AAA
H3C S3100 Series Ethernet Switches
The self-service server location function needs the cooperation of a RADIUS
server that supports self-service, such as comprehensive access management
server (CAMS). Through self-service, users can manage and control their account
or card numbers by themselves. A server installed with self-service software is
called a self-service server.
Note:
H3C's CAMS Server is a service management system used to manage networks and
ensure network and user information security. With the cooperation of other networking
devices (such as switches) in a network, a CAMS server can implement the AAA
functions and right management.

2.1.3 Configuring an AAA Scheme for an ISP Domain

You can configure either of the following AAA schemes:
I. Configuring a combined AAA scheme
You can use the scheme command to specify an AAA scheme for an ISP domain. If
you specify a RADIUS or HWTACACS scheme, the authentication, authorization and
accounting will be uniformly implemented by the RADIUS or TACACS server(s)
specified in the RADIUS or HWTACACS scheme. In this way, you cannot specify
different schemes for authentication, authorization and accounting respectively.
Table 2-4 Configure a combined AAA scheme
Enter system view
Create an ISP domain
and enter its view, or enter
the view of an existing ISP
domain
Configure an AAA
scheme for the ISP
domain
Operation
system-view
domain isp-name
scheme { local | none |
radius-scheme
radius-scheme-name [ local ] |
hwtacacs-scheme
hwtacacs-scheme-name [ local ] }
Command
2-4
Chapter 2 AAA Configuration
Remarks
—
Required
Required
By default, an ISP
domain uses the
local AAA
scheme.