3Com MSR 50 Series, Руководство по настройке

Страница: 1766 / 2443

1766 C
HAPTER
93: AAA/RADIUS/HWTACACS C
ONFIGURATION
authentication, you must use the same scheme setting for authorization and
authentication; otherwise, the system will prompt you with an error message.
Configuring an AAA
Accounting Scheme for
an ISP Domain
In AAA, accounting is a separate process at the same level as authentication and
authorization. Its responsibility is to send accounting start/update/end requests to
the specified accounting server. Accounting is not required, and therefore
accounting scheme configuration is optional. If you do not perform any
accounting configuration, the system-default domain uses the local accounting
scheme.
Before configuring an authorization scheme, complete these three tasks:
1
For RADIUS or HWTACACS accounting, configure the RADIUS or HWTACACS
scheme to be referenced first. The local and none authentication modes do not
require any scheme.
2
Determine the access mode or service type to be configured. With AAA, you can
configure an accounting scheme specifically for each access mode and service
type, limiting the accounting protocols that can be used for access.
3
Determine whether to configure an accounting scheme for all access modes or
service types.
Follow these steps to configure an AAA accounting scheme for an ISP domain:
To do... Use the command... Remarks
Enter system view system-view -
Create an ISP domain and
enter ISP domain view domain isp-name Required
Enable the accounting
optional feature accounting optional Optional
Disabled by default
Specify the default accounting
scheme for all types of users accounting default
{ hwtacacs-scheme
hwtacacs-scheme-name
[ local ] | local | none |
radius-scheme
radius-scheme-name
[ local ] }
Optional
Local by default
Specify the accounting
scheme for LAN access users accounting lan-access
{ local | none |
radius-scheme
radius-scheme-name
[ local ] }
Optional
The default accounting
scheme is used by default.
Specify the accounting
scheme for login users accounting login
{ hwtacacs-scheme
hwtacacs-scheme-name
[ local ] | local | none |
radius-scheme
radius-scheme-name
[ local ] }
Optional
The default accounting
scheme is used by default.
Specify the accounting
scheme for Portal users accounting portal { none |
radius-scheme
radius-scheme-name }
Optional
The default accounting
scheme is used by default.