H3C Technologies H3C SecBlade LB Cards - Manual (Page 61)

50
2. Configure AAA methods for the ISP domain.
{
Authentication method—No authentication (none), local authentication (local), or remote
authentication (scheme)
{
Authorization method—No authorization (none), local authorization (local), or remote
authorization (scheme)
{
Accounting method—No accounting (none), local accounting (local), or remote accounting
(scheme)
See Figure 28 for the configuration procedure.
Figure 28 AAA configuration procedure
Table 12 AAA configuration task list
Task Remarks
Configuring AAA
schemes
Configuring local users
Required.
Complete at least
one task.
Configuring RADIUS schemes
Configuring HWTACACS schemes
Configuring AAA
methods for ISP domains
Creating an ISP domain Required.
Configuring ISP domain attributes Optional.
Configuring authentication methods for an ISP domain
Required.
Complete at least
one task.
Configuring authorization methods for an ISP domain
Configuring accounting methods for an ISP domain
NOTE:
To use AAA methods to control access of login users, you must configure the user interfaces to use AAA by
using the authentication-mode command.
Configure the RADIUS or
HWTACACS schemes to be
referenced
none / local (the default) / scheme
Authorization method
Accounting method
Configure AAA methods for
different types of users or/and
the default methods for all
types of users
Create an ISP domain
and enter its view
Authentication method
Configure local users and related
attributes
+
+
Local AAA
Remote AAA
No AAA
none / local (the default) / scheme
none / local (the default) / scheme