R2511-HP MSR Router Series Security Configuration Guide(V5)

21
1. Configure the required AAA schemes.
{ Local authentication—Configure local users and the related attributes, including the usernames
and passwords for the users to be authenticated.
{ Remote authentication—Configure the required RADIUS and HWTACACS schemes. You must
configure user attributes on the servers accordingly.
2. Configure AAA methods for the ISP domain.
{ Authentication method—No authentication (none), local authentication (local), or remote
authentication (scheme)
{ Authorization method—No authorization (none), local authorization (local), or remote
authorization (scheme)
{ Accounting method—No accounting (none), local accounting (local), or remote accounting
(scheme)
See Figure 10 f
or the configuration procedure.
Figure 10 AAA configuration procedure
Table 5 AAA configuration task list
Task Remarks
Configuring AAA
schemes
Configuring local users
Required.
Complete at least
one task
.
Configuring RADIUS schemes
Configuring HWTACACS schemes
Configuring AAA
methods for ISP domains
Creating an ISP domain Required.
Configuring ISP domain attributes Optional.
Configuring authentication methods for an ISP domain
Required.
Complete at least
one task.
Configuring authorization methods for an ISP domain
Configuring accounting methods for an ISP domain