3Com Switch 8800 Advanced Software V5 Configuration Guide

894 CHAPTER 70: AAA, RADIUS AND HWTACACS CONFIGURATION
Follow these steps to configure an AAA accounting scheme for an ISP domain:
n
■ With the accounting optional command configured, a user will not be
disconnected even if accounting cannot be performed in case no accounting
server is available or the communication with the current accounting server
fails.
■ The accounting scheme specified with the accounting default command is
for all types of users and has a priority lower than that for a specific access
mode.
■ Local accounting only aims to manage the number of local user connections,
but provides no statistics function. This management function is only available
for local accounting, but is not available for local authorization or local
authentication.
■ With the radius-scheme radius-scheme-name local or hwtacacs-scheme
hwtacacs-scheme-name local keyword and argument combination configured,
the local scheme is the backup scheme when the RADIUS server or HWTACACS
server does not make normal response. That is, when the RADIUS server or
HWTACACS server is available, local accounting is not used. Otherwise, local
accounting is used.
■ If the primary accounting scheme is local or none, the system performs local
accounting or does not perform any accounting, rather than uses the RADIUS
or HWTACACS scheme.
To do... Use the command... Remarks
Enter system view system-view -
Create an ISP domain or enter
ISP domain view
domain isp-name Required
Enable the accounting
optional feature
accounting optional Optional
By default,
accounting-optional is
disabled when an ISP domain
is created.
Specify the accounting
scheme for all types of users
accounting default {
hwtacacs-scheme
hwtacacs-scheme-name [
local ] | local | none |
radius-scheme
radius-scheme-name [ local ] }
Optional
Local by default
Specify the accounting
scheme for LAN access users
accounting lan-access {
local | none | radius-scheme
radius-scheme-name [ local ] }
Optional
Specify the accounting
scheme for login users
accounting login {
hwtacacs-scheme
hwtacacs-scheme-name [
local ] | local | none |
radius-scheme
radius-scheme-name [ local ] }
Optional
Specify the accounting
scheme for PPP users
accounting ppp {
hwtacacs-scheme
hwtacacs-scheme-name [
local ] | local | none |
radius-scheme
radius-scheme-name [ local ] }
Optional