Operation Manual – AAA RADIUS HWTACACSH3C S7500E Series Ethernet SwitchesChapter 1 AAA/RADIUS/HWTACACSConfiguration1-15To do… Use the command… RemarksSpecify the maximumnumber of users in theISP domainaccess-limit { disable |enablemax-user-number }OptionalNo limit by defaultConfigure the idle cutfunctionidle-cut { disable |enable minute }OptionalDisabled by defaultEnable the self-serviceserver localizationfunction and specify theURL of the self-serviceserver for changing userpasswordself-service-url { disable| enable url-string }OptionalDisabled by defaultNote:A self-service RADIUS server, for example, CAMS, is required for the self-serviceserver localization function. With the self-service function, a user can manage andcontrol his or her accounting information or card number. A server with self-servicesoftware is a self-service server.1.3.4 Configuring an AAA Authentication Scheme for an ISP DomainIn AAA, authentication, authorization, and accounting are three separate processes.Authentication refers to the interactive authentication process ofusername/password/user information during access or service request. Theauthentication process neither sends authorization information to a supplicant nortriggers any accounting. You can configure AAA to use only authentication. If you do notperform any authentication configuration, the system-default ISP domain uses the localauthentication scheme.Before configuring an authentication scheme, complete these three tasks:z For RADIUS or HWTACACS authentication, configure the RADIUS orHWTACACS scheme to be referenced first. The local and none authenticationmodes do not require any scheme.z Determine the access mode or service type to be configured. With AAA, you canconfigure an authentication scheme specifically for each access mode and servicetype, limiting the authentication protocols that can be used for access.z Determine whether to configure an authentication scheme for all access modes orservice types.Follow these steps to configure an AAA authentication scheme for an ISP domain:
