H3C S7500 Series Ethernet Switches Operation Manual

Operation Manual – AAA & RADIUS & HWTACACS & EAD
H3C S7500 Series Ethernet Switches
Chapter 1 AAA & RADIUS & HWTACACS
Configuration
1-11
7) The TACACS client sends the user authorization request packet to the TACACS
server.
8) The TACACS server sends back the authorization response, indicating that the
user has passed the authorization.
9) Upon receipt of the response indicating an authorization success, the TACACS
client pushes the configuration interface of the switch to the user.
10) The TACACS client sends an accounting start request packet to the TACACS
server.
11) The TACACS server sends back an accounting response, indicating that it has
received the accounting start request.
12) The user logs out; the TACACS client sends an accounting stop request to the
TACACS server.
13) The TACACS server sends back an accounting stop packet, indicating that the
accounting stop request has been received.
1.2 AAA & RADIUS & HWTACACS Configuration Task List
Table 1-4 Configuration tasks
To do... Remarks Related section
Create an ISP
domain
Required
Creating an ISP
Domain
Configure the
attributes of the ISP
domain
Optional
Configuring the
Attributes of an ISP
Domain
Configure an AAA
scheme for the ISP
domain
Required
If local
authentication is
adopted, refer to
Configuring the
Attributes of a
Local User
.
If RADIUS
authentication is
adopted, refer to
RADIUS
Configuration
.
Configuring an AAA
Scheme for an ISP
Domain
Configure dynamic
VLAN assignment
Optional
Configuring Dynamic
VLAN Assignment
Configure the
attributes of a local
user
Optional
Configuring the
Attributes of a Local
User
AAA
configuration
Cut down user
connections forcibly
Optional
Cutting Down User
Connections