Configuring AAA

Usage Scenario

• Local authentication and authorization

  If user authentication or authorization is required when no RADIUS or HWTACACS server is deployed on the network, user authentication or authorization can be implemented in local authentication or authorization mode. Local authentication and authorization feature fast processing and low operation cost, whereas the amount of information that can be stored is limited by the hardware capacity of the device.

  Local authentication and authorization are often used for administrators. Local authentication is a backup of RADIUS authentication and HWTACACS authentication; local authorization is a backup of HWTACACS authorization.

• HWTACACS authentication, authorization, and accounting: The authentication, authorization, and accounting in HWTACACS mode can prevent unauthorized users from attacking the network. In addition, the HWTACACS mode supports the authorization of command lines. Compared with RADIUS, HWTACACS is more reliable in transmission and encryption and is more suitable for security control.
• RADIUS authentication and accounting: The authentication and accounting in RADIUS mode can prevent unauthorized users from attacking the network. The RADIUS mode is often used in network environments requiring high security and remote access control.

Pre-configuration Tasks

Before configuring AAA, complete the following tasks:

• Power on the router or switch and ensuring that the self-test is successful.

• Ensure that the device is accessible.

Configuration Procedures

Figure 1 AAA configuration flowchart