H3C S7500 Series Ethernet Switches Operation Manual

Operation Manual – AAA & RADIUS & HWTACACS & EAD
H3C S7500 Series Ethernet Switches
Chapter 1 AAA & RADIUS & HWTACACS
Configuration
1-15
To do... Use the command... Remarks
Turn on/off the
accounting-optional
switch
accounting optional
Optional
By default, once an ISP
domain is created, the
accounting-optional
switch is turned off.
Set the messenger
function
messenger time { enable
limit interval | disable }
Optional
By default, the messenger
function is disabled.
Set the self-service server
location function
self-service-url { disable
| enable url-string }
Optional
By default, the
self-service server
location function is
disabled.
Caution:
z On an S7500 series switch, each access user belongs to an ISP domain. You can
configure up to 16 ISP domains on the switch. When a user logs in, if no ISP domain
name is carried in the user name, the switch assumes that the user belongs to the
default ISP domain.
z When a user is to be charged, if the system does not find any available accounting
server or fails to communicate with any accounting server, it will not disconnect the
user as long as the accounting optional command has been executed.
z The self-service server location function must cooperate with a RADIUS server
(such as CAMS) that supports self-service. Through self-service, users can manage
and control their accounts or card numbers by themselves. A server installed with
self-service software is called a self-service server.
 Note:
H3C’s CAMS Server is a service management system used to manage networks and
secure networks and user information. Cooperating with other network devices (such
as switches) in a network, the CAMS Server implements the AAA (authentication,
authorization and accounting) services and rights management.
1.3.4 Configuring an AAA Scheme for an ISP Domain
You can use the scheme command to specify an AAA scheme. If you specify a
RADIUS or HWTACACS scheme, the authentication, authorization, and accounting will