3Com 5500-SI Switch User Manual


 
AAA Separation 415
Network diagram
Figure 108 Network diagram for separate AAA schemes
Configuration procedure
1 Enter system view.
<S5500> system-view
2 Create an ISP domain named cams.
[S5500] domain cams
3 Return to system view.
[S5500-isp-cams] quit
4 Configure a RADIUS scheme named radius.
[S5500] radius scheme radius
[S5500-radius-radius] primary accounting 10.110.91.164 1813
[S5500-radius-radius] primary authentication 10.110.91.164 1812
[S5500-radius-radius] key authentication expert
[S5500-radius-radius] user-name-format with-domain
[S5500-radius-radius] quit
5 Enter the ISP domain cams.
[S5500] domain cams
6 Configure the RADIUS scheme radius as both the authentication and accounting
schemes of the ISP domain cams, and allow users in this ISP domain to use network
services without being authorized.
[S5500-isp-cams] authentication radius-scheme radius
[S5500-isp-cams] accounting radius-scheme radius
[S5500-isp-cams] authorization none
Enabling/Disabling the
Messenger Alert
Messenger alert function allows the clients to inform the online users about their
remaining online time through the message alert dialog box.
The implementation of this function is as follows:
On the switch, use the following command to enable this function and to
configure the remaining-online-time threshold (the
limit argument) and the alert
message interval.
Authentication Servers
( IP address:10.110.91.164 )
Internet
Switch
Remote user
Internet
Authentication Servers
( IP address:10.110.91.164 )
Internet
Switch
Authentication server
IP address: 10.110.91.164
Internet
Switch
Remote user
Internet
Authentication Servers
( IP address:10.110.91.164 )
Internet
Switch
Authentication Servers
( IP address:10.110.91.164 )
Internet
Switch
Remote user
Internet
Remote user
Internet
Authentication Servers
( IP address:10.110.91.164 )
Internet
Switch
Authentication Servers
( IP address:10.110.91.164 )
Internet
Switch
Authentication server
IP address: 10.110.91.164
Internet
Switch
User end
Internet
Authentication Servers
( IP address:10.110.91.164 )
Internet
Switch
Authentication Servers
( IP address:10.110.91.164 )
Internet
Switch
Remote user
Internet
Remote user
Internet
Authentication Servers
( IP address:10.110.91.164 )
Internet
Switch
Authentication Servers
( IP address:10.110.91.164 )
Internet
Switch
Authentication server
IP address: 10.110.91.164
Internet
Switch
Remote user
Internet
Authentication Servers
( IP address:10.110.91.164 )
Internet
Switch
Authentication Servers
( IP address:10.110.91.164 )
Internet
Switch
Remote user
Internet
Remote user
Internet
Authentication Servers
( IP address:10.110.91.164 )
Internet
Switch
Authentication Servers
( IP address:10.110.91.164 )
Internet
Switch
Authentication server
IP address: 10.110.91.164
Internet
Switch
User end
Internet
Authentication Servers
( IP address:10.110.91.164 )
Internet
Switch
Authentication Servers
( IP address:10.110.91.164 )
Internet
Switch
Remote user
Internet
Remote user
Internet
Authentication Servers
( IP address:10.110.91.164 )
Internet
Switch
Authentication Servers
( IP address:10.110.91.164 )
Internet
Switch
Authentication server
IP address: 10.110.91.164
Internet
Switch
Remote user
Internet
Authentication Servers
( IP address:10.110.91.164 )
Internet
Switch
Authentication Servers
( IP address:10.110.91.164 )
Internet
Switch
Remote user
Internet
Remote user
Internet
Authentication Servers
( IP address:10.110.91.164 )
Internet
Switch
Authentication Servers
( IP address:10.110.91.164 )
Internet
Switch
Authentication server
IP address: 10.110.91.164
Internet
Switch
User end
Internet
Authentication Servers
( IP address:10.110.91.164 )
Internet
Switch
Authentication Servers
( IP address:10.110.91.164 )
Internet
Switch
Remote user
Internet
Remote user
Internet
Authentication Servers
( IP address:10.110.91.164 )
Internet
Switch
Authentication Servers
( IP address:10.110.91.164 )
Internet
Switch
Authentication server
IP address: 10.110.91.164
Internet
Switch
Remote user
Internet
Authentication Servers
( IP address:10.110.91.164 )
Internet
Switch
Authentication Servers
( IP address:10.110.91.164 )
Internet
Switch
Remote user
Internet
Remote user
Internet
Authentication Servers
( IP address:10.110.91.164 )
Internet
Switch
Authentication Servers
( IP address:10.110.91.164 )
Internet
Switch
Authentication server
IP address: 10.110.91.164
Internet
Switch
User end
Internet