No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

NE40E V800R010C10SPC500 Configuration Guide - User Access 01

This is NE40E V800R010C10SPC500 Configuration Guide - User Access
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Configuring an AAA Scheme for a Domain

Configuring an AAA Scheme for a Domain

You must configure an AAA scheme for a domain before you perform AAA on users in this domain.

Context

Perform the following steps on the router:

Procedure

  1. Run system-view

    The system view is displayed.

  2. Run aaa

    The AAA view is displayed.

  3. Run domain domain-name

    The domain view is displayed.

    NOTE:

    User authentication, authorization, and accounting must be performed in the domain view.

  4. Run authentication-scheme scheme-name

    An authentication scheme is specified for the domain.

    By default, the default1 authentication scheme is used for user-defined domains, the default1 domain, or the default authentication scheme is used for the default_admin domain; the default0 authentication scheme is used for the default0 domain. You can run the display authentication-scheme command to view detailed information about the default authentication schemes.

  5. Run accounting-scheme scheme-name

    An accounting scheme is specified for the domain.

    By default, the default1 accounting scheme is used for user-defined domains and the default1 domain; the default0 accounting scheme is used for the default0 domain and default_admin domain.

  6. (optional) Run accounting dual-stack { separate | identical }

    The accounting mode for IPv4/IPv6 dual-stack users is configured.

    When separate is configured, traffic of IPv4 and IPv6 users is sent to the server separately; when identical is configured, traffic of IPv4 and IPv6 users is sent to the server together.

    By default, accounting is performed separately for IPv4 users and IPv6 users.

  7. Run authorization-scheme scheme-name

    An authorization scheme is specified for the domain.

Translation
Download
Updated: 2019-01-03

Document ID: EDOC1100055031

Views: 17590

Downloads: 70

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next