Aaa/Radius/Hwtacacs Configuration Task List - 3Com Switch 4800G 24-Port Configuration Manual

756 C 53: AAA/RADIUS/HWTACACS C
HAPTER
Protocols and Standards
AAA/RADIUS/HWTAC
ACS Configuration
Task List
ONFIGURATION
6 After receiving the username from the user, the HWTACACS client sends to the
server a continue-authentication packet carrying the username.
7 The HWTACACS server sends back an authentication response, requesting the
login password.
8 Upon receipt of the response, the HWTACACS client requests of the user the login
password.
9 The user enters the password.
10 After receiving the login password, the HWTACACS client sends to the
HWTACACS server a continue-authentication packet carrying the login password.
11 The HWTACACS server sends back an authentication response indicating that the
user has passed authentication.
12 The HWTACACS client sends the user authorization request packet to the
HWTACACS server.
13 The HWTACACS server sends back the authorization response, indicating that the
user is authorized now.
14 Knowing that the user is now authorized, the HWTACACS client pushes the
configuration interface of the NAS to the user.
15 The HWTACACS client sends a start-accounting request to the HWTACACS server.
16 The HWTACACS server sends back an accounting response, indicating that it has
received the start-accounting request.
17 The user logs off.
18 The HWTACACS client sends a stop-accounting request to the HWTACACS server.
19 The HWTACACS server sends back a stop-accounting packet, indicating that the
stop-accounting request has been received.
The protocols and standards related to AAA, RADIUS, and HWTACACS include:
RFC 2865: Remote Authentication Dial In User Service (RADIUS)
■
RFC 2866: RADIUS Accounting
■
RFC 2867: RADIUS Accounting Modifications for Tunnel Protocol Support
■
RFC 2868: RADIUS Attributes for Tunnel Protocol Support
■
RFC 2869: RADIUS Extensions
■
RFC 1492: An Access Control Protocol, Sometimes Called TACACS
■
AAA configuration task list
Task
"Creating an ISP Domain" on page 758
"Configuring ISP Domain Attributes" on page 758
Remarks
Required
Optional