Configuring Aaa - 3Com Switch 7700 Configuration Manual

298 C 9: AAA
HAPTER AND

Configuring AAA

RADIUS O
PERATION
Figure 3 Networking with Switch 7700 Applying RADIUS Authentication
PC use1
PC user2
Switch 7700
PC user3
PC user4
Switch 7700
Configuring the AAA and RADIUS Protocols is described in the following sections:
Configuring AAA
■
Configuring the RADIUS Protocol
■
Troubleshooting AAA and RADIUS
■
AAA configuration includes tasks that are described in the following sections:
Creating/Deleting an ISP Domain
■
Configuring Relevant Attributes of an ISP Domain
■
Creating a Local User
■
Setting Attributes of a Local User
■
Disconnecting a User by Force
■
Among the above configuration tasks, creating an ISP domain is required,
otherwise the supplicant attributes cannot be distinguished. The other tasks are
optional. You can configure them at requirements.
Creating/Deleting an ISP Domain
ISP domain is a group of users belonging to the same ISP. Taking
gw20010608@3com163.net as an example in the userid@isp-name format, the
isp-name (i.e. 3com163.net) following the @ is the ISP domain name. When the
Switch 7700 control user access, as for an ISP user whose username is in
userid@isp-name format, the system will take userid part as username for
identification and take isp-name part as domain name.
The purpose of introducing ISP domain settings is to support the multi-ISP
application environment. In such an environment, one access device might access
users of different ISP. Because the attributes of ISP users, such as username and
password formats, etc., may be different, it is necessary to differentiate them by
setting ISP domain. In the Switch 7700 ISP domain view, you can configure a
Switch 7700
Switch 7700
Internet
Authentication
server
Accounting
server1
ISP1
ISP2