Configuring Aaa - H3C S7500E Series Operation Manual

Operation Manual – AAA RADIUS HWTACACS
H3C S7500E Series Ethernet Switches
Specifying Security Policy Servers
Enabling the Listening Port of the RADIUS Client
III. HWTACACS configuration task list
Creating a HWTACAS scheme
Specifying the HWTACACS Authentication Servers
Specifying the HWTACACS Authorization Servers
Specifying the HWTACACS Accounting Servers
Setting the Shared Key for HWTACACS Packets
Configuring Attributes Related to the Data Sent to the
HWTACACS server
Setting Timers Regarding HWTACACS Servers

1.3 Configuring AAA

By configuring AAA, you can provide network access service for legal users, protect the
networking devices, and avoid unauthorized access and bilking. In addition, you can
configure ISP domains to perform AAA on accessing users.
In AAA, users are divided into LAN users (such as 802.1x users and MAC
authentication users), login users (such as SSH, Telnet, FTP, and terminal access
users), portal users and command line users (that is, command line authentication
users).
authentication/authorization/accounting policies for all the other type of users.
Command line users can be configured with authorization policy independently.
1.3.1 Configuration Prerequisites
For remote authentication, authorization, or accounting, you must create the RADIUS
or HWTACACS scheme first.
RADIUS scheme: Reference a configured RADIUS scheme to implement
authentication/authorization and accounting. For RADIUS scheme configuration,
refer to
HWTACACS scheme: Reference a configured HWTACACS scheme to implement
authentication/authorization
configuration, refer to
Task
Task
Except for command
Configuring RADIUS.
Configuring
Chapter 1 AAA/RADIUS/HWTACACS
line users, you
and accounting.
HWTACACS.
1-13
Configuration
Remarks
Optional
Optional
Remarks
Required
Required
Optional
Optional
Required
Optional
Optional
can configure separate
For HWTACACS scheme