Operation Manual – AAA-RADIUS-HWTACACSH3C S3610&S5510 Series Ethernet SwitchesChapter 1 AAA/RADIUS/HWTACACSConfiguration1-115) After receiving the login password, the HWTACACS client sends to theHWTACACS server an authentication continuance packet carrying the loginpassword.6) The HWTACACS server sends back an authentication response indicating thatthe user has passed authentication.7) The HWTACACS client sends the user authorization packet to the HWTACACSserver.8) The HWTACACS server sends back the authorization response, indicating thatthe user is authorized now.9) Knowing that the user is now authorized, the HWTACACS client pushes theconfiguration interface of the router or switch to the user.10) The HWTACACS client sends a start-accounting request to the HWTACACSserver.11) The HWTACACS server sends back an accounting response, indicating that it hasreceived the start-accounting request.12) When the user logs off, the HWTACACS client sends a stop-accounting request tothe HWTACACS server.13) The HWTACACS server sends back a stop-accounting packet, indicating that thestop-accounting request has been received.1.2 AAA/RADIUS/HWTACACS Configuration Task ListI. AAA configuration task listTask RemarksCreating an ISP Domain RequiredConfiguring ISP Domain Attributes OptionalConfiguring an AAA AuthenticationScheme for an ISP DomainRequiredFor local authentication, refer toConfiguring Local User Attributes.For RADIUS authentication, refer toConfiguring RADIUS.For HWTACACS authentication, refer toConfiguring HWTACACS.Configuring an AAA AuthorizationScheme for an ISP Domain OptionalConfiguring an AAA Accounting Schemefor an ISP Domain OptionalConfiguring Local User Attributes OptionalTearing down User ConnectionsForcibly Optional
