1-2AccountingAAA supports the following accounting methods:z None accounting: No accounting is performed for users.z Local accounting: It is not used for charging purposes, but for collecting statistics and limiting thenumber of local user connections.z Remote accounting: User accounting is performed on a remote RADIUS or TACACS server.Introduction to ISP DomainAn Internet service provider (ISP) domain is a group of users who belong to the same ISP.In a multi-ISP environment, the users connected to the same access device may belong to differentdomains. Since the users of different ISPs may have different attributes (such as different forms of username and password, different service types/access rights), it is necessary to distinguish the users bysetting ISP domains.You can configure a set of ISP domain attributes (including AAA policy, RADIUS scheme, and so on) foreach ISP domain independently in ISP domain view. Authentication, authorization, and accounting of auser depends on the AAA methods configured for the domain that the user belongs to. The ISP domainof a user is determined by the username used for login.z If the user enters the username in the form of userid@domain-name, the NAS device uses domaindomain-name to authenticate the user.z If the user enters the username in the form of userid, the NAS device uses the default domain toauthenticate the user.The AAA feature allows you to manage users based on their access types:z LAN users: Users on a LAN who access through, for example, 802.1X authentication or MACauthentication.z Login users: Users who log in to the device using, for example, SSH, Telnet, and FTP.This feature allows you to configure different authentication, authorization, and accounting methods fordifferent users in a domain, or based on their access types if the login username must be in the form ofuserid.Figure 1-1 Network diagram of per user type AAA configuration
