2
AAA Configuration
AAA Configuration Task List
Configuration introduction
You need to configure AAA to provide network access services for legal users while protecting network
devices and preventing unauthorized access and repudiation behavior.
Table 2-1 AAA configuration tasks (configuring a combined AAA scheme for an ISP domain)
AAA
configuration
Table 2-2 AAA configuration tasks (configuring separate AAA schemes for an ISP domain)
AAA
configuration
Task
Creating an ISP Domain and Configuring
Its Attributes
Configuring a combined AAA scheme
Configuring an AAA Scheme for an ISP
Domain
Configuring Dynamic VLAN Assignment
Configuring the Attributes of a Local User
Cutting Down User Connections Forcibly
Task
Creating an ISP Domain and Configuring
Its Attributes
Configuring separate AAA schemes
Configuring an AAA Scheme for an ISP
Domain
Configuring Dynamic VLAN Assignment
Configuring the Attributes of a Local User
Required
Required
Required
You can configure a set of AAA
schemes specific to different user
access modes in an ISP domain.
You need to configure RADIUS or
HWATACACS before performing
RADIUS
authentication.
Optional
Optional
Optional
Required
Required
Required
With separate AAA schemes, you
can
authorization
schemes respectively.
You need to configure RADIUS or
HWATACACS before performing
RADIUS
authentication.
Optional
Optional
2-1
Remarks
or
HWTACACS
Remarks
specify
authentication,
and
accounting
or
HWTACACS