beautypg.com

Configuring an aaa scheme for an isp domain, Configuring a combined aaa scheme – H3C Technologies H3C S3600 Series Switches User Manual

Page 519

background image

2-3

To do…

Use the command…

Remarks

Set the messenger function

messenger time { enable limit
interval
| disable }

Optional

By default, the messenger
function is disabled.

Set the self-service server
location function

self-service-url { disable |
enable url-string }

Optional

By default, the self-service
server location function is
disabled.

Note that:

z

On an S3600 series switch, each access user belongs to an ISP domain. You can configure up to

16 ISP domains on the switch. When a user logs in, if no ISP domain name is carried in the

username, the switch assumes that the user belongs to the default ISP domain.

z

If you have configured to use "." as the delimiter, for a username that contains multiple ".", the first

"." will be used as the domain delimiter.

z

If you have configured to use "@" as the delimiter, the "@" must not appear more than once in the

username. If “.” is the delimiter, the username must not contain any “@”.

z

If the system does not find any available accounting server or fails to communicate with any

accounting server when it performs accounting for a user, it does not disconnect the user as long

as the accounting optional command has been executed, though it cannot perform accounting for

the user in this case.

z

The self-service server location function needs the cooperation of a RADIUS server that supports

self-service, such as Comprehensive Access Management Server (CAMS). Through self-service,

users can manage and control their account or card numbers by themselves. A server installed

with self-service software is called a self-service server.

H3C's CAMS Server is a service management system used to manage networks and ensure network

and user information security. With the cooperation of other networking devices (such as switches) in a

network, a CAMS server can implement the AAA functions and right management.

Configuring an AAA Scheme for an ISP Domain

You can configure either a combined AAA scheme or separate AAA schemes.

Configuring a combined AAA scheme

You can use the scheme command to specify an AAA scheme for an ISP domain.

Follow these steps to configure a combined AAA scheme:

To do…

Use the command…

Remarks

Enter system view

system-view

This manual is related to the following products: