3Com 3C13636 Configuration Manual page 991

3Com Router 3000 Ethernet Family
Configuration Guide
Chapter 1 Network Security Configuration................................................................................. 1-1
1.1 Introduction to the Network Security Features Provided by V 2.41................................... 1-1
1.2 Hierarchical Command Line Protection ............................................................................. 1-2
1.3 RADIUS-Based AAA.......................................................................................................... 1-2
1.4 Packet Filter and Firewall .................................................................................................. 1-2
1.4.1 Firewall Concept...................................................................................................... 1-2
1.4.2 Firewall Classification.............................................................................................. 1-3
1.4.3 Packet Filter ............................................................................................................ 1-4
1.5 Security Authentication before Route Information Exchange............................................ 1-5
Chapter 2 AAA and RADIUS/HWTACACS Protocol Configuration .......................................... 2-1
2.1 Overview ............................................................................................................................ 2-1
2.1.1 Introduction to AAA ................................................................................................. 2-1
2.1.2 Introduction to the RADIUS Protocol ...................................................................... 2-2
2.1.3 Introduction to the HWTACACS Protocol ............................................................... 2-7
2.2 Configuring AAA ................................................................................................................ 2-9
2.2.1 Creating an ISP Domain and Setting the Related Attributes ................................ 2-10
2.2.2 Creating a Local User and Setting the Related Attributes .................................... 2-15
2.3 Configuring the RADIUS Protocol.................................................................................... 2-18
2.3.1 Creating a RADIUS Scheme................................................................................. 2-18
2.3.2 Configuring RADIUS Authentication/Authorization Servers.................................. 2-19
2.3.3 Configuring RADIUS Accounting Servers and the Related Attributes .................. 2-20
2.3.4 Setting the Shared Key for RADIUS Packet Encryption ....................................... 2-22
2.3.5 Setting the Maximum Number of RADIUS Request Attempts .............................. 2-22
2.3.6 Configuring the User Re-authentication at Reboot Function ................................ 2-23
2.3.7 Setting the Supported RADIUS Server Type ........................................................ 2-24
2.3.8 Setting RADIUS Server State ............................................................................... 2-25
2.3.9 Setting Username Format Acceptable to RADIUS Server.................................... 2-25
2.3.10 Setting the Unit of Data Flows Destined for RADIUS Server.............................. 2-26
2.3.11 Configuring Source Address for RADIUS Packets Sent by NAS........................ 2-26
2.3.12 Setting Timers Regarding RADIUS Server ......................................................... 2-27
2.3.13 Enabling the RADIUS Server to Send Traps when It Goes Down...................... 2-28
2.3.14 Configuring a Local RADIUS Authentication Server ........................................... 2-29
2.4 Configuring HWTACACS Protocol................................................................................... 2-30
2.4.1 Creating a HWTACAS scheme ............................................................................. 2-30
2.4.2 Configuring TACACS Authentication Servers....................................................... 2-31
2.4.3 Configuring TACACS Authorization Servers......................................................... 2-31
2.4.4 Configuring TACACS Accounting Servers and the Related Attributes ................. 2-32
2.4.5 Configuring Source Address for HWTACACS Packets Sent by NAS................... 2-33
Table of Contents
3Com Corporation
i
Table of Contents