2-3as the accounting optional command has been executed, though it cannot perform accounting forthe user in this case.z The self-service server location function needs the cooperation of a RADIUS server that supportsself-service, such as Comprehensive Access Management Server (CAMS). Through self-service,users can manage and control their account or card numbers by themselves. A server installedwith self-service software is called a self-service server.H3C's CAMS Server is a service management system used to manage networks and ensure networkand user information security. With the cooperation of other networking devices (such as switches) in anetwork, a CAMS server can implement the AAA functions and right management.Configuring an AAA Scheme for an ISP DomainYou can configure a combined AAA scheme or separate AAA scheme on the switch.z If both are configured, separate AAA schemes apply.z Once the authentication command is configured, separate AAA schemes, if any, apply.Configuring a combined AAA schemeYou can configure a combined AAA scheme by using the scheme command.Before configuring a combined AAA scheme, do the following:z For RADIUS or HWTACACS authentication, configure the RADIUS or HWTACACS scheme to bereferenced first. The local and none authentication methods do not require any scheme.z Determine the access mode or service type to be configured. With AAA, you can configure anauthentication method specifically for each access mode and service type, limiting theauthentication protocols that can be used for access.z Determine whether to configure an authentication method for all access modes or service types.Follow these steps to configure a combined AAA scheme:To do… Use the command… RemarksEnter system view system-view —Create an ISP domain and enter itsview, or enter the view of anexisting ISP domaindomain isp-name RequiredConfigure an AAA scheme for theISP domainscheme { local | none | radius-schemeradius-scheme-name [ local ] |hwtacacs-scheme hwtacacs-scheme-name[ local ] }RequiredBy default, an ISPdomain uses the localAAA scheme.
