Fips compliance, Aaa configuration considerations and task list – H3C Technologies H3C S12500-X Series Switches User Manual
Page 29
![background image](https://www.manualsdir.com/files/812698/content/doc029.png)
17
No. Sub-attribute
Description
206 Output-Interval-Gigawords
Amount of bytes output within an accounting interval, in units of 4G
bytes.
207 Backup-NAS-IP
Backup
source IP address for sending RADIUS packets.
255 Product_ID
Product
name.
16B
FIPS compliance
The device supports the FIPS mode that complies with NIST FIPS 140-2 requirements. Support for features,
commands, and parameters might differ in FIPS mode (see "
685H
Configuring FIPS
") and non-FIPS mode.
17B
AAA configuration considerations and task list
To configure AAA, complete these tasks on the NAS:
1.
Configure the required AAA schemes.
{
Local authentication—Configure local users and the related attributes, including the usernames
and passwords, for the users to be authenticated.
{
Remote authentication—Configure the required RADIUS, HWTACACS, and LDAP schemes.
2.
Configure AAA methods for the users' ISP domains. Remote AAA methods need to reference the
configured RADIUS, HWTACACS, and LDAP schemes.
Figure 10 AAA configuration procedure
To configure AAA, perform the following tasks:
Configure the RADIUS, HWTACACS,
or LDAP schemes to be referenced
none
/
local (the default)
/
scheme
Authorization method
Accounting method
Configure AAA methods for
different types of users or/and
the default methods for all
types of users
Create an ISP domain
and enter its view
Authentication method
Configure local users and related
attributes
+
+
Local AAA
Remote AAA
No AAA
none
/
local (the default)
/
scheme
none
/
local (the default)
/
scheme
- H3C S5560 Series Switches H3C WX6000 Series Access Controllers H3C WX5000 Series Access Controllers H3C WX3000 Series Unified Switches H3C LSWM1WCM10 Access Controller Module H3C LSWM1WCM20 Access Controller Module H3C LSQM1WCMB0 Access Controller Module H3C LSRM1WCM2A1 Access Controller Module H3C LSBM1WCM2A0 Access Controller Module H3C S9800 Series Switches H3C S5130 Series Switches H3C S5120 Series Switches