Configuring an aaa scheme for an isp domain, Configuring a combined aaa scheme – H3C Technologies H3C S3600 Series Switches User Manual
Page 519
2-3
To do…
Use the command…
Remarks
Set the messenger function
messenger time { enable limit
interval | disable }
Optional
By default, the messenger
function is disabled.
Set the self-service server
location function
self-service-url { disable |
enable url-string }
Optional
By default, the self-service
server location function is
disabled.
Note that:
z
On an S3600 series switch, each access user belongs to an ISP domain. You can configure up to
16 ISP domains on the switch. When a user logs in, if no ISP domain name is carried in the
username, the switch assumes that the user belongs to the default ISP domain.
z
If you have configured to use "." as the delimiter, for a username that contains multiple ".", the first
"." will be used as the domain delimiter.
z
If you have configured to use "@" as the delimiter, the "@" must not appear more than once in the
username. If “.” is the delimiter, the username must not contain any “@”.
z
If the system does not find any available accounting server or fails to communicate with any
accounting server when it performs accounting for a user, it does not disconnect the user as long
as the accounting optional command has been executed, though it cannot perform accounting for
the user in this case.
z
The self-service server location function needs the cooperation of a RADIUS server that supports
self-service, such as Comprehensive Access Management Server (CAMS). Through self-service,
users can manage and control their account or card numbers by themselves. A server installed
with self-service software is called a self-service server.
H3C's CAMS Server is a service management system used to manage networks and ensure network
and user information security. With the cooperation of other networking devices (such as switches) in a
network, a CAMS server can implement the AAA functions and right management.
Configuring an AAA Scheme for an ISP Domain
You can configure either a combined AAA scheme or separate AAA schemes.
Configuring a combined AAA scheme
You can use the scheme command to specify an AAA scheme for an ISP domain.
Follow these steps to configure a combined AAA scheme:
To do…
Use the command…
Remarks
Enter system view
system-view
—