H3C Technologies H3C S7500E Series Switches - Manual (Page 14)

1-1
1
AAA Overview
z The S7500E Series Ethernet Switches are distributed devices supporting Intelligent Resilient
Framework (IRF). Two S7500E series can be connected together to form a distributed IRF device.
If an S7500E series is not in any IRF, it operates as a distributed device; if the S7500E series is in
an IRF, it operates as a distributed IRF device. For introduction of IRF, see IRF Configuration in
the IRF Configuration Guide.
z EA cards (such as LSQ1GP12EA and LSQ1TGX1EA) do not support IPv6 features.
This chapter includes these sections:
z Introduction to AAA
z Introduction to RADIUS
z Introduction to HWTACACS
z Domain-Based User Management
z Protocols and Standards
Introduction to AAA
Authentication, Authorization, and Accounting (AAA) provides a uniform framework for configuring
these three security functions to implement network security management.
AAA usually uses a client/server model, where the client runs on the network access server (NAS) and
the server maintains user information centrally. In an AAA network, a NAS is a server for users but a
client for the AAA servers, as shown in Figure 1-1 .
Figure 1-1 AAA networking diagram