H3C S5500-SI Series, Operation Manual

Page: 545 / 1217

1-1
1
AAA Configuration
When configuring AAA, go to these sections for information you are interested in:
z
Introduction to AAA
z
Introduction to RADIUS
z
Introduction to HWTACACS
z
Protocols and Standards
z
AAA Configuration Task List
z
Configuring AAA
z
Configuring RADIUS
z
Configuring HWTACACS
z
AAA Configuration Examples
z
Troubleshooting AAA
Introduction to AAA
Authentication, Authorization, and Accounting (AAA) provides a uniform framework for configuring
these three security functions to implement network security management.
AAA usually uses a client/server model, where the client runs on the network access server (NAS) and
the server maintains user information centrally. In an AAA network, a NAS is a server for users but a
client for the AAA servers, as shown in Figure 1-1 .
Figure 1-1 AAA networking diagram
When a user tries to establish a connection to the NAS and to obtain the rights to access other networks
or some network resources, the NAS authenticates the user or the corresponding connection. The NAS
can transparently pass the user’s AAA information to the server (RADIUS server or HWTACACS server).
The RADIUS/HWTACACS protocol defines how a NAS and a server exchange user information
between them.
In the AAA network shown in Figure 1-1 , there is a RADIUS server and a HWTACACS server. You can
determine the authentication, authorization and accounting methods according to the actual