Filter
Top Products
276 CHAPTER 9: AAA AND RADIUS OPERATION
Figure 3 Networking with Switch 8800 Applying RADIUS Authentication
Configuring the AAA and RADIUS Protocols is described in the following sections:
■ Configuring AAA
■ Configuring the RADIUS Protocol
■ Troubleshooting AAA and RADIUS
Configuring AAA AAA configuration includes tasks that are described in the following sections:
■ Creating or Deleting an Internet Service Provider (ISP) Domain
■ Configuring Relevant Attributes of an ISP Domain
■ Creating a Local User
■ Setting Attributes of a Local User
■ Disconnecting a User by Force
Among the above configuration tasks, creating an ISP domain is required,
otherwise the supplicant attributes cannot be distinguished. The other tasks are
optional. You can configure them at requirements.
Creating or Deleting an Internet Service Provider (ISP) Domain
An Internet Service Provider (ISP) domain is a group of users who belong to the
same ISP. Taking gw20010608@3com163.net as an example in the
userid@isp-name format, the isp-name (i.e. 3com163.net) following the @ is the
ISP domain name. When the Switch 8800 control user access, as for an ISP user
whose username is in userid@isp-name format, the system will take userid part as
username for identification and take isp-name part as domain name.
The purpose of introducing ISP domain settings is to support the multi-ISP
application environment. In such an environment, one access device might access
users of different ISP. Because the attributes of ISP users, such as username and
password formats, etc., may be different, it is necessary to differentiate them by
setting ISP domain. In the Switch 8800 ISP domain view, you can configure a
PC use1
PC user2
PC user3
PC user4
Switch 7700
Switch 7700
Switch 7700
Switch 7700
Internet
ISP1
ISP2
Authentication
server
Accounting
server1