Configuring An Aaa Scheme For An Isp Domain - 3Com WX3000 Series Operation Manual

To do...
Set the accounting-optional
switch
Set the messenger function
Set the self-service server
location function
Note that:
On a unified device, each access user belongs to an ISP domain. You can configure up to 16 ISP
domains on the device. When a user logs in, if no ISP domain name is carried in the user name, the
device assumes that the user belongs to the default ISP domain.
If you have configured to use "." as the delimiter, for a user name that contains multiple ".", the first
"." will be used as the domain delimiter.
If you have configured to use "@" as the delimiter, the "@" must not appear more than once in the
user name.
If the system does not find any available accounting server or fails to communicate with any
accounting server when it performs accounting for a user, it does not disconnect the user as long
as the accounting optional command has been executed, though it cannot perform accounting for
the user in this case.
The self-service server location function needs the cooperation of a RADIUS server that supports
self-service, such as comprehensive access management server (iMC). Through self-service,
users can manage and control their account or card numbers by themselves. A server installed
with self-service software is called a self-service server.
iMC Server is a service management system used to manage networks and ensure network and user
information security. With the cooperation of other networking devices in a network, a iMC server can
implement the AAA functions and right management.

Configuring an AAA Scheme for an ISP Domain

You can configure either of the following AAA schemes:
Configuring a combined AAA scheme
You can use the scheme command to specify an AAA scheme for an ISP domain. If you specify a
RADIUS or HWTACACS scheme, the authentication, authorization and accounting will be uniformly
implemented by the RADIUS or TACACS server(s) specified in the RADIUS or HWTACACS scheme. In
Use the command...
accounting optional
messenger time { enable limit
interval | disable }
self-service-url { disable |
enable url-string }
2-3
Remarks
Optional
By default, the
accounting-optional switch is
off.
Optional
By default, the messenger
function is disabled.
Optional
By default, the self-service
server location function is
disabled.