AAA Separation 413
Enabling the Selection of the RADIUS Accounting Option
If no RADIUS server is available or if the RADIUS accounting server fails when the
accounting optional is configured, the user can still use the network resource,
otherwise, the user will be disconnected. The user configured with the accounting
optional command in RADIUS scheme will no longer send real-time accounting
update packets or offline accounting packets.
Perform the following configurations in ISP Domain View.
Table442 Enabling the Selection of the RADIUS Accounting Option
By default, the selection of RADIUS accounting option is disabled.
The accounting optional command can also be configured in the RADIUS scheme
view which is only effective on the accounting that uses this RADIUS scheme. If this
command is configured both on an ISP domain and the RADIUS scheme it uses, the
latest configuration will take effect.
AAA Separation AAA (authentication, authorization and accounting) is a management framework for
network access control. It provides the following three services:
■Authentication: Checks if a user can access the network.
■Authorization: Authorizes a user to use a specific service.
■Accounting: Records the network usage of a user.
In AAA management, you can use the authentication, authorization, and
accounting commands separately to specify a scheme for each of the three AAA
functions (authentication, authorization and accounting) respectively. This AAA
separation feature brings flexibility to AAA configuration. The following lists the
implementations of AAA separation for the services supported by AAA.
■For terminal users
Authentication method: RADIUS, local, RADIUS-local, or none.
Authorization method: none.
Accounting method: RADIUS or none.
You can configure combined authentication, authorization and accounting schemes
depending on the methods supported by the switch according to your needs.
■For FTP users
Only authentication is supported for FTP users.
Authentication method: RADIUS, local, or RADIUS-local.
Operation Command
Enable the selection of RADIUS accounting option accounting optional
Disable the selection of RADIUS accounting option undo accounting optional