R3166-R3206-HP High-End Firewalls Access Control Configuration Guide-6PW101

126
Figure 88 AAA configuration procedure
Table 45 AAA configuration task list
Task Remarks
Configuring AAA
schemes
Configuring local users
Required
Complete at le
ast one task.
Configuring RADIUS schemes
Configuring HWTACACS schemes
Configuring AAA
methods for ISP domains
Creating an ISP domain Required
Configuring ISP domain attributes Optional
Configuring AAA authentication methods for
an ISP domain
Required
Complete at least one task.
Configuring AAA authorization methods for an
ISP domain
Configuring AAA accounting methods for an
ISP domain
Tearing down user connections Optional
Configuring a NAS ID-VLAN binding Optional
NOTE:
To control access of lo
g
in users by usin
g
AAA methods, you must confi
g
ure the lo
g
in authentication mode
for the user interfaces as scheme. For more information about the configuration command, see
Getting
Started Guide Command Reference
.
Configure the RADIUS, HWTACACS,
and LDAP schemes to be referenced
Authorization method
Accounting method
Configure AAA methods
Create an ISP domain
and enter its view
local (the default)
None
scheme
Authentication method
Configure local users and related
attributes
+
+
Local AAA
Remote AAA
No AAA
local (the default)
None
scheme
local (the default)
None
scheme