Configuring Local User Attributes - 3Com 4500G Family Configuration Manual

Follow these steps to configure AAA accounting methods for an ISP domain:
To do...
Enter system view
Create an ISP domain and enter
ISP domain view
Enable the accounting optional
feature
Specify the default accounting
method for all types of users
Specify the command accounting
method
Specify the accounting method for
LAN users
Specify the accounting method for
login users
With the accounting optional command configured, a user to be disconnected can still use the
network resources even when there is no available accounting server or communication with the
current accounting server fails.
The local accounting is not used for accounting implementation, but together with the attribute
access-limit command for limiting the number of local user connections. However, with the
accounting optional command configured, the limit on the number of local user connections is not
effective.
The accounting method specified with the accounting default command is for all types of users
and has a priority lower than that for a specific access mode.
With the
hwtacacs-scheme-name local keyword and argument combination configured, local accounting is
the backup method and is used only when the remote server is not available.
If the primary accounting method is local or none, the system performs local accounting or does
not perform any accounting, and will not use the RADIUS or HWTACACS accounting scheme.
In login access mode, accounting is not supported for FTP services.

Configuring Local User Attributes

For local authentication, you need to create local users and configure user attributes on the device as
needed.
Use the command...
system-view
domain isp-name
accounting optional
accounting
{
hwtacacs-scheme-name [ local ] |
local | none | radius-scheme
radius-scheme-name [ local ] }
accounting
hwtacacs-scheme
hwtacacs-scheme-name
accounting lan-access { local |
none
radius-scheme-name [ local ] }
accounting
{
hwtacacs-scheme-name [ local ] |
local | none | radius-scheme
radius-scheme-name [ local ] }
radius-scheme radius-scheme-name
default
hwtacacs-scheme
command
| radius-scheme
login
hwtacacs-scheme
local
1-18
Remarks
—
Required
Optional
Disabled by default
Optional
local by default
Optional
The default accounting method is
used by default.
Optional
The default accounting method is
used by default.
Optional
The default accounting method is
used by default.
or hwtacacs-scheme