15
No. Sub-attribute Descri
tion
207 Backup-NAS-IP Backup source IP address for sending RADIUS packets
255 Product_ID Product name
AAA configuration considerations and task list
To configure AAA, you must complete these tasks on the NAS:
1. Configure the required AAA schemes.
• Local authentication—Configure local users and the related attributes, including the usernames and
passwords of the users to be authenticated.
• Remote authentication—Configure the required RADIUS and HWTACACS schemes. You must
configure user attributes on the servers accordingly.
2. Configure AAA methods for the users’ ISP domains.
• Authentication method—No authentication (none), local authentication (local), or remote
authentication (scheme)
• Authorization method—No authorization (none), local authorization (local), or remote
authorization (scheme)
• Accounting method—No accounting (none), local accounting (local), or remote accounting
(scheme)
Figure 10 AAA configuration diagram
Configure the RADIUS and
HWTACACS schemes
Authorization method
Accounting method
Configure AAA methods
Create an ISP domain
and enter its view
local (the default)
None
scheme
Authentication method
Configure local users and related
attributes
+
+
Local AAA
Remote AAA
No AAA
local (the default)
None
scheme
local (the default)
None
scheme
Table 4 AAA configuration task list
Task Remarks
Configuring AAA
schemes
Configuring local users
Required
Complete at least one task.
Configuring RADIUS schemes