H3C Technologies H3C S3100 Series Switches User Manual
Page 298
Operation Manual – AAA – RADIUS – HWTACACS
H3C S3100-52P Ethernet Switch
Table of Contents
i
Table of Contents
1.1.1 Introduction to AAA ................................................................................................. 1-1
1.1.2 Introduction to ISP Domain ..................................................................................... 1-2
1.1.3 Introduction to RADIUS........................................................................................... 1-2
1.1.4 Introduction to HWTACACS.................................................................................... 1-7
1.2 Configuration Task........................................................................................................... 1-10
1.3 AAA Configuration ........................................................................................................... 1-12
1.3.1 Configuration Prerequisites................................................................................... 1-13
1.3.2 Creating an ISP Domain ....................................................................................... 1-13
1.3.3 Configuring the Attributes of an ISP Domain ........................................................ 1-13
1.3.4 Configuring an AAA Scheme for an ISP Domain.................................................. 1-15
1.3.5 Configuring Dynamic VLAN Assignment .............................................................. 1-17
1.3.6 Configuring the Attributes of a Local User ............................................................ 1-19
1.3.7 Cutting Down User Connections Forcibly ............................................................. 1-21
1.4.1 Creating a RADIUS Scheme................................................................................. 1-22
1.4.2 Configuring RADIUS Authentication/Authorization Servers.................................. 1-23
1.4.3 Configuring RADIUS Accounting Servers............................................................. 1-24
1.4.4 Configuring Shared Keys for RADIUS Messages................................................. 1-25
1.4.5 Configuring Maximum Number of Transmission Attempts of RADIUS Request .. 1-26
1.4.6 Configuring to Support a Type of RADIUS Server................................................ 1-27
1.4.7 Configuring the Status of RADIUS Servers .......................................................... 1-27
1.4.8 Configuring the Attributes for Data to be Sent to RADIUS Servers ...................... 1-28
1.4.9 Configuring Local RADIUS Authentication Server................................................ 1-29
1.4.10 Configuring the Timers of RADIUS Servers........................................................ 1-30
1.4.11 Enabling the Sending of Trap Message When a RADIUS Server is Down ........ 1-31
1.4.12 Enabling the User Re-Authentication at Restart Function .................................. 1-32
1.5.1 Creating a HWTACAS Scheme ............................................................................ 1-33
1.5.2 Configuring HWTACACS Authentication Servers................................................. 1-34
1.5.3 Configuring HWTACACS Authorization Servers................................................... 1-35
1.5.4 Configuring HWTACACS Accounting Servers...................................................... 1-36
1.5.5 Configuring Shared Keys for HWTACACS Messages.......................................... 1-36
1.5.6 Configuring the Attributes for Data to be Sent to TACACS Servers ..................... 1-37
1.5.7 Configuring the Timers of TACACS Servers......................................................... 1-38
1.6 Displaying and Maintaining AAA & RADIUS & HWTACACS Information ....................... 1-39
1.7 AAA & RADIUS & HWTACACS Configuration Example................................................. 1-41