R3303-HP HSR6800 Routers Security Configuration Guide

20
No. Sub-attribute Descri
p
tion
205 Input-Interval-Gigawords Amount of bytes input within an accounting interval, in units of 4G bytes.
206 Output-Interval-Gigawords Amount of bytes output within an accounting interval, in units of 4G bytes.
207 Backup-NAS-IP Backup source IP address for sending RADIUS packets.
255 Product_ID Product name.
AAA configuration considerations and task list
To configure AAA on the NAS:
1. Configure the required AAA schemes.
{ Local authentication—Configure local users and the related attributes, including the usernames
and passwords for the users to be authenticated.
{ Remote authentication—Configure the required RADIUS and HWTACACS schemes. You must
configure user attributes on the servers accordingly.
2. Configure AAA methods for the ISP domain.
{ Authentication method—No authentication (none), local authentication (local), or remote
authentication (scheme)
{ Authorization method—No authorization (none), local authorization (local), or remote
authorization (scheme)
{ Accounting method—No accounting (none), local accounting (local), or remote accounting
(scheme)
See Figure 9
for the configuration procedure.
Figure 9 AAA configuration procedure
Table 4 AAA configuration task list
Task Remarks
Configuring AAA
Configuring local users Required.
Configure the RADIUS or
HWTACACS schemes to be
referenced
none/ local (the default)/ scheme
Authorization method
Accounting method
Configure AAA methods for
different types of users or/and
the default methods for all
types of users
Create an ISP domain
and enter its view
Authentication method
Configure local users and related
attributes
+
+
Local AAA
Remote AAA
No AAA
none/ local (the default)/ scheme
none/ local (the default)/ scheme