H3C S5500-SI Series, Operation Manual

Page: 541 / 1217

Security Volume Organization
Manual Version
20090930-C-1.01
Product Version
Release 2202
Organization
The Security Volume is organized as follows:
Features Description
AAA
Authentication, Authorization and Accounting (AAA) provide a uniform
framework used for configuring these three security functions to
implement the network security management. This document describes:
z
Introduction to AAA, RADIUS and HWTACACS
z
AAA configuration
z
RADIUS configuration
z
HWTACACS configuration
802.1X
IEEE 802.1X (hereinafter simplified as 802.1X) is a port-based network
access control protocol that is used as the standard for LAN user access
authentication. This document describes:
z
802.1X overview
z
802.1X configuration
z
802.1X Guest-VLAN configuration
HABP
On an HABP-capable switch, HABP packets can bypass 802.1X
authentication and MAC authentication, allowing communication among
switches in a cluster. This document describes:
z
Introduction to HABP
z
HABP configuration
MAC Authentication
MAC authentication provides a way for authenticating users based on
ports and MAC addresses; it requires no client software to be installed on
the hosts. This document describes:
z
RADIUS-Based MAC Authentication
z
Local MAC Authentication
Portal
Portal authentication, as its name implies, helps control access to the
Internet. This document describes:
z
Portal overview
z
Portal configuration