Switch 7700 Configuration Guide

Configuring the AAA and RADIUS Protocols 187
client-end is implemented on The Switch 7700. The figure below illustrates the
RADIUS authentication network.
Figure 3 Networking with Switch 7700 Applying RADIUS Authentication
Configuring AAA AAA configuration includes tasks that are described in the following sections:
■ Creating/Deleting an ISP Domain
■ Configuring Relevant Attributes of an ISP Domain
■ Creating a Local User
■ Setting Attributes of a Local User
■ Disconnecting a User by Force
Among the above configuration tasks, creating ISP domain is required; otherwise
the supplicant attributes cannot be distinguished. The other tasks are optional.
You can configure them at requirements.
Creating/Deleting an ISP Domain
ISP domain is a group of users belonging to the same ISP. Taking
[e-mail] as an example in the userid@isp-name format, the
isp-name (i.e. 3com163.net) following the @ is the ISP domain name. When the
Switch 7700 control user access, as for an ISP user whose username is in
userid@isp-name format, the system will take userid part as username for
identification and take isp-name part as domain name.
The purpose of introducing ISP domain settings is to support the multi-ISP
application environment. In such environment, one access device might access
users of different ISP. Because the attributes of ISP users, such as username and
password formats, etc., may be different, it is necessary to differentiate them
through setting ISP domain. In the Switch 7700 ISP domain view, you can
configure a complete set of exclusive ISP domain attributes on a per-ISP domain
basis, which includes AAA policy (RADIUS server group applied etc.)
PC use1
PC user2
PC user3
PC user4
Switch 7700
Switch 7700
Switch 7700
Switch 7700
Internet
ISP1
ISP2
Authentication
server
Accounting
server1