Configuring Aaa - Huawei SmartAX MA5603T Configuration Manual

SmartAX MA5600T/MA5603T/MA5608T Multi-service
Access Module
Commissioning and Configuration Guide

2.4 Configuring AAA

This topic describes how to configure the AAA on the MA5600T/MA5603T/MA5608T,
including configuring the MA5600T/MA5603T/MA5608T as the local and remote AAA
servers.
Context
AAA refers to authentication, authorization, and accounting. In the process that a user accesses
network resources, through AAA, certain rights are authorized to the user if the user passes
authentication, and the original data about the user accessing network resources is recorded.
l
l
l
Application Context
AAA is generally applied to the users that access the Internet in the PPPoA, PPPoE, 802.1x,
VLAN, WLAN, ISDN, or Admin SSH (associating the user name and the password with the
domain name) mode.
NOTE
Figure 2-1
Figure 2-1 Example network of the AAA application
The preceding figure shows that the AAA function can be implemented on the MA5600T/
MA5603T/MA5608T in the following three ways:
l
Issue 01 (2014-04-30)
Authentication: Checks whether a user is allowed to access network resources.
Authorization: Determines what network resources a user can access.
Accounting: Records the original data about the user accessing network resources.
In the existing network, 802.1x and Admin SSH correspond to the local AAA, that is, the MA5600T/
MA5603T/MA5608T functions as a local AAA server; PPPoE corresponds to the remote AAA, that is, the
MA5600T/MA5603T/MA5608T functions as the client of a remote AAA server.
shows an example network of the AAA application.
The MA5600T/MA5603T/MA5608T functions as a local AAA server. In this case, the
local AAA needs to be configured. The local AAA does not support accounting.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
2 Basic Configurations
226