H3C Technologies H3C S5120 Series Switches - Manual (Page 414)

1-8
AAA Configuration Task List
The basic procedure to configure AAA is as follows:
1) Configure the required AAA schemes.
z Local authentication: Configure local users and related attributes, including usernames and
passwords of the users to be authenticated.
z Remote authentication: Configure the required RADIUS schemes, and configure user attributes on
the servers accordingly.
2) Configure the AAA methods: Reference the configured AAA schemes in the users’ ISP domains.
z Authentication method: No authentication (none), local authentication (local), or remote
authentication (scheme)
z Authorization method: No authorization (none) , local authorization (local), or remote authorization
(scheme)
z Accounting method: No accounting (none), local accounting (local), or remote accounting
(scheme)
For login users, it is necessary to configure the authentication mode for logging into the user interface
as scheme. For detailed information, refer to Login Configuration.
AAA Configuration Task List
Task Remarks
Creating an ISP Domain Required
Configuring ISP Domain Attributes Optional
Configuring AAA Authentication Methods for an
ISP Domain
Required
For local authentication, refer to Configuring
Local User Attributes .
For RADIUS authentication, refer to Configuring
RADIUS .
Configuring AAA Authorization Methods for an
ISP Domain
Optional
Configuring AAA Accounting Methods for an ISP
Domain
Optional
Configuring Local User Attributes Optional
Configuring User Group Attributes Optional
Tearing down User Connections Forcibly Optional
Configuring a NAS ID-VLAN Binding Optional
Displaying and Maintaining AAA Optional