AAA and User Management Configuration (Administrative Users)

AAA and User Management Overview

AAA provides security functions for user authentication, authorization, and accounting.

Configuration Precautions for AAA and User Management for Administrator Users

Configuring AAA

Before configuring AAA, familiarize yourself with the applicable environment, complete the pre-configuration tasks, and obtain the data required for the configuration. This will help you complete the configuration task quickly and efficiently.

Configuring the RADIUS Server

Configure Remote Authentication Dial-In User Service (RADIUS) parameters if a remote RADIUS server implements authentication and accounting.

Configuring Command-Line Authorization

Command-line authorization determines whether the user has the right to run a command. Command-line authorization is classified into level authorization and task authorization.

Configuring the Command-Line Recording Scheme

Before configuring the command-line recording scheme, you must configure the HWTACACS server template.

Configuring AAA Security Measures

You can set the password strength requirement and maximum number of unsuccessful login attempts to improve AAA security.

Maintaining AAA and User Management

Maintaining AAA and user management involves displaying AAA configurations, clearing AAA statistics, and forcing users to log out of the network.

Configuration Examples for AAA and User Management

The configuration examples refer to the applications of the user group, local authentication and authorization, RADIUS authentication and authorization, and HWTACACS authentication and authorization on the actual network.