Aaa Configuration; Configuration Prerequisites - H3C S7500 Series Operation Manual

Operation Manual – AAA & RADIUS & HWTACACS & EAD
H3C S7500 Series Ethernet Switches
HWTACACS
configuration

1.3 AAA Configuration

The goal of AAA configuration is to protect network devices against unauthorized
access and at the same time provide network access services to authorized users. If
you need to use ISP domains to implement AAA management on access users, you
need to configure the ISP domains.
This section covers these topics:

Configuration Prerequisites

Creating an ISP Domain
Configuring the Attributes of an ISP Domain
Configuring an AAA Scheme for an ISP Domain
Configuring Dynamic VLAN Assignment
Configuring the Attributes of a Local User
Cutting Down User Connections
1.3.1 Configuration Prerequisites
To implement remote AAA, you need to create a RADIUS or HWTACACS scheme.
To do...
Create a
HWTACACS scheme
Configure
HWTACACS
authentication
servers
Configure
HWTACACS
authorization servers
Configure
HWTACACS
accounting servers
Configure shared
keys for HWTACACS
packets
Configure the
attributes for data to
be sent to TACACS
servers
Configure the timers
of TACACS servers
1-13
Chapter 1 AAA & RADIUS & HWTACACS
Remarks
Creating a
Required
HWTACACS Scheme
Configuring
Required HWTACACS
Authentication Servers
Configuring
Required HWTACACS
Authorization Servers
Configuring
Optional HWTACACS
Accounting Servers
Configuring Shared
Optional Keys for HWTACACS
Packets
Configuring the
Attributes for Data to be
Optional
Sent to TACACS
Servers
Configuring the Timers
Optional
of TACACS Servers
Configuration
Related section