Operation Manual – AAA & RADIUS & HWTACACS & EADH3C S7500 Series Ethernet SwitchesChapter 1 AAA & RADIUS & HWTACACSConfiguration1-13To do... Remarks Related sectionCreate aHWTACACS scheme Required Creating aHWTACACS SchemeConfigureHWTACACSauthenticationserversRequiredConfiguringHWTACACSAuthentication ServersConfigureHWTACACSauthorization serversRequiredConfiguringHWTACACSAuthorization ServersConfigureHWTACACSaccounting serversOptionalConfiguringHWTACACSAccounting ServersConfigure sharedkeys for HWTACACSpacketsOptionalConfiguring SharedKeys for HWTACACSPacketsConfigure theattributes for data tobe sent to TACACSserversOptionalConfiguring theAttributes for Data to beSent to TACACSServersHWTACACSconfigurationConfigure the timersof TACACS servers Optional Configuring the Timersof TACACS Servers1.3 AAA ConfigurationThe goal of AAA configuration is to protect network devices against unauthorizedaccess and at the same time provide network access services to authorized users. Ifyou need to use ISP domains to implement AAA management on access users, youneed to configure the ISP domains.This section covers these topics:z Configuration Prerequisitesz Creating an ISP Domainz Configuring the Attributes of an ISP Domainz Configuring an AAA Scheme for an ISP Domainz Configuring Dynamic VLAN Assignmentz Configuring the Attributes of a Local Userz Cutting Down User Connections1.3.1 Configuration PrerequisitesTo implement remote AAA, you need to create a RADIUS or HWTACACS scheme.
