Configuring An Aaa Scheme For An Isp Domain - H3C S5100-SI Operation Manual

To do...
Set the accounting-optional
switch
Set the messenger function
Set the self-service server
location function
Note that:
On an S5100-SI/EI series switch, each access user belongs to an ISP domain. You can configure
up to 16 ISP domains on the switch. When a user logs in, if no ISP domain name is carried in the
username, the switch assumes that the user belongs to the default ISP domain.
If you have configured to use "." as the delimiter, for a username that contains multiple ".", the first
"." will be used as the domain delimiter.
If you have configured to use "@" as the delimiter, the "@" must not appear more than once in the
username. If "." is the delimiter, the username must not contain any "@".
If the system does not find any available accounting server or fails to communicate with any
accounting server when it performs accounting for a user, it does not disconnect the user as long
as the accounting optional command has been executed, though it cannot perform accounting for
the user in this case.
The self-service server location function needs the cooperation of a RADIUS server that supports
self-service, such as Comprehensive Access Management Server (CAMS). Through self-service,
users can manage and control their account or card numbers by themselves. A server installed
with self-service software is called a self-service server.
H3C's CAMS Server is a service management system used to manage networks and ensure network
and user information security. With the cooperation of other networking devices (such as switches) in a
network, a CAMS server can implement the AAA functions and right management.

Configuring an AAA Scheme for an ISP Domain

You can configure either a combined AAA scheme or separate AAA schemes.
Configuring a combined AAA scheme
You can use the scheme command to specify an AAA scheme for an ISP domain.
Follow these steps to configure a combined AAA scheme:
Use the command...
accounting optional
messenger time { enable limit
interval | disable }
self-service-url { disable |
enable url-string }
2-3
Remarks
Optional
By default, the
accounting-optional switch is
off.
Optional
By default, the messenger
function is disabled.
Optional
By default, the self-service
server location function is
disabled.