AAA

Authentication, Authorization, and Accounting (AAA) is used to manage network security. It provides a uniform framework to configure authentication, authorization, and accounting security functions.

Generally, AAA uses the client/server model. In this model, the client runs on the resource side that is managed through AAA, whereas the server collects and keeps all user information. This model features good extensibility and facilitates concentrated management over user information.

• AAA Scheme
  You can add, modify, and delete an authentication scheme, authorization scheme, or accounting scheme.
• Service Scheme
  Access users must obtain authorization information before going online. Authorization information about users can be managed by configuring a service scheme.
• RADIUS
  You can create, modify, and delete the RADIUS server template, authentication/accounting server, and authorization server. Before configuring a RADIUS authentication/ accounting server, you must create a RADIUS server template. A RADIUS server builds a unique database to store user names and passwords for authentication and accounting. The RADIUS authorization server receives authorization information sent by users and sends authorization information to users after users pass authorization.
• Domain
  The switch manages users based on domains. You can configure the default authorization scheme, RADIUS template, authentication scheme, and accounting scheme in a domain.
• User Management
  You can create a local database to maintain user information and manage users on the local switch.
• Change Mode
  NAC supports the common configuration mode and unified configuration mode. With the NAC function, the device can control user access to the network.