H3C S7500 Series Ethernet Switches Operation Manual

Operation Manual – AAA & RADIUS & HWTACACS & EAD
H3C S7500 Series Ethernet Switches
Chapter 1 AAA & RADIUS & HWTACACS
Configuration
1-1
Chapter 1 AAA & RADIUS & HWTACACS
Configuration
When configuring AAA, RADIUS, and HWTACACS, go to these sections for
information you are interested in:
z Introduction to AAA, RADIUS and HWTACACS
z AAA & RADIUS & HWTACACS Configuration Task List
z AAA Configuration
z RADIUS Configuration
z HWTACACS Configuration
z Displaying and Maintaining AAA & RADIUS & HWTACACS Information
z AAA & RADIUS & HWTACACS Configuration Example
z Troubleshooting AAA & RADIUS & HWTACACS Configuration
1.1 Introduction to AAA, RADIUS and HWTACACS
This section covers these topics:
z Introduction to AAA
z Introduction to ISP Domain
z Introduction to RADIUS
z Introduction to HWTACACS
1.1.1 Introduction to AAA
AAA is short for three security functions: authentication, authorization and accounting.
It provides a uniform framework for configuring the three security functions to
implement network security management.
Network security mentioned here mainly refers to access control. It controls:
z Which users can access the network server,
z Which services the users can access,
z How to charge the users who are using network resources.
Accordingly, AAA provides the following services:
I. Authentication
AAA supports the following authentication methods:
z No authentication: Users are trusted and no authentication is performed for them.
Generally, this method is not recommended.