H3C Technologies H3C S3600 Series Switches - Manual (Page 517)

2-1
2
AAA Configuration
z A feature named Auto VLAN is added. For its configuration information, refer to Configuring
dynamic VLAN list assignment . For its configuration example, refer to Auto VLAN Configuration
Example .
z A feature allowing ignorance of assigned RADIUS authorization attributes is added. For details,
refer to Configuring Ignorance of Assigned RADIUS Authorization Attributes .
AAA Configuration Task List
You need to configure AAA to provide network access services for legal users while protecting network
devices and preventing unauthorized access and repudiation behavior.
Complete the following tasks to configure AAA (configuring a combined AAA scheme for an ISP
domain):
Task Remarks
Creating an ISP Domain and Configuring Its
Attributes
Required
Configuring a combined AAA scheme Required
None authentication
Local authentication
RADIUS authentication
Configuring an AAA
Scheme for an ISP
Domain
HWTACACS
authentication
z Use one of the authentication
methods
z You need to configure RADIUS
or HWATACACS before
performing RADIUS or
HWTACACS authentication
Configuring Dynamic VLAN Assignment Optional
Configuring the Attributes of a Local User Optional
AAA
configurati
on
Cutting Down User Connections Forcibly Optional
Complete the following tasks to configure AAA (configuring separate AAA schemes for an ISP domain):