Introduction To Aaa - Huawei Quidway S3900 Series Operation Manual

Operation Manual – AAA & RADIUS & HWTACACS & EAD
Quidway S3900 Series Ethernet Switches-Release 1510
Chapter 1 AAA & RADIUS & HWTACACS
1.1 Overview

1.1.1 Introduction to AAA

AAA is shortened from the three security functions: authentication, authorization and
accounting. It provides a uniform framework for you to configure the three security
functions to implement the network security management.
The network security mentioned here mainly refers to access control. It mainly controls:
Which users can access the network,
Which services the users can have access to,
How to charge the users who are using network resources.
Accordingly, AAA provides the following services:
I. Authentication
AAA supports the following authentication methods:
None authentication: Users are trusted and are not authenticated. Generally, this
method is not recommended.
Local authentication: User information (including user name, password, and
attributes) is configured on this device. Local authentication is fast and requires
lower operational cost. But the information storage capacity is limited by device
hardware.
Remote authentication: Users are authenticated remotely through the RADIUS
protocol or HWTACACS protocol. This device (for example, a Quidway series
switch) acts as the client to communicate with the RADIUS server or TACACS
server. For RADIUS protocol, both standard and extended RADIUS protocols can
be used.
II. Authorization
AAA supports the following authorization methods:
Direct authorization: Users are trusted and directly authorized.
Local authorization: Users are authorized according to the related attributes
configured for their local accounts on the device.
RADIUS authorization: Users are authorized after they pass the RADIUS
authentication. The authentication and authorization of RADIUS protocol are
Configuration
Huawei Technologies Proprietary
1-1
Chapter 1 AAA & RADIUS & HWTACACS
Configuration