
AAA Separation 415
Network diagram
Figure108 Network diagram for separate AAA schemes
Configuration procedure
1Enter system view.
<S5500> system-view
2Create an ISP domain named cams.[S5500] domain cams
3Return to system view.[S5500-isp-cams] quit
4Configure a RADIUS scheme named radius.[S5500] radius scheme radius
[S5500-radius-radius] primary accounting 10.110.91.164 1813
[S5500-radius-radius] primary authentication 10.110.91.164 1812
[S5500-radius-radius] key authentication expert
[S5500-radius-radius] user-name-format with-domain
[S5500-radius-radius] quit
5Enter the ISP domain cams.[S5500] domain cams
6Configure the RADIUS scheme radius as both the authentication and accounting schemes of the ISP domain cams, and allow users in this ISP domain to use network services without being authorized.[S5500-isp-cams] authentication radius-scheme radius
[S5500-isp-cams] accounting radius-scheme radius
[S5500-isp-cams] authorization none
Enabling/Disabling theMessenger AlertMessenger alert function allows the clients to inform the online users about their remaining online time through the message alert dialog box. The implementation of this function is as follows:■On the switch, use the following command to enable this function and to
configure the remaining-online-time threshold (the limit argument) and the alert message interval.Authentication Serv ers
( IP address:10.110.91. 164 )
Internet
Switch
Remote user
Internet
Authentication Serv ers
( IP address:10.110.91. 164 )
Internet
Switch
Authentication s er ver
IP address: 10.110. 91. 164
Internet
Switch
Remote user
Internet
Authentication Serv ers
( IP address:10.110.91. 164 )
Internet
Switch
Authentication Serv ers
( IP address:10.110.91. 164 )
Internet
Switch
Remote user
Internet
Remote user
Internet
Authentication Serv ers
( IP address:10.110.91. 164 )
Internet
Switch
Authentication Serv ers
( IP address:10.110.91. 164 )
Internet
Switch
Authentication s er ver
IP address: 10.110. 91. 164
Internet
Switch
User end
Internet
Authentication Serv ers
( IP address:10.110.91. 164 )
Internet
Switch
Authentication Serv ers
( IP address:10.110.91. 164 )
Internet
Switch
Remote user
Internet
Remote user
Internet
Authentication Serv ers
( IP address:10.110.91. 164 )
Internet
Switch
Authentication Serv ers
( IP address:10.110.91. 164 )
Internet
Switch
Authentication s er ver
IP address: 10.110. 91. 164
Internet
Switch
Remote user
Internet
Authentication Serv ers
( IP address:10.110.91. 164 )
Internet
Switch
Authentication Serv ers
( IP address:10.110.91. 164 )
Internet
Switch
Remote user
Internet
Remote user
Internet
Authentication Serv ers
( IP address:10.110.91. 164 )
Internet
Switch
Authentication Serv ers
( IP address:10.110.91. 164 )
Internet
Switch
Authentication s er ver
IP address: 10.110.91. 164
Internet
Switch
User end
Internet
Authentication Serv ers
( IP address:10.110.91. 164 )
Internet
Switch
Authentication Serv ers
( IP address:10.110.91. 164 )
Internet
Switch
Remote user
Internet
Remote user
Internet
Authentication Serv ers
( IP address:10.110.91. 164 )
Internet
Switch
Authentication Serv ers
( IP address:10.110.91. 164 )
Internet
Switch
Authentication s er ver
IP address: 10.110. 91. 164
Internet
Switch
Remote user
Internet
Authentication Serv ers
( IP address:10.110.91. 164 )
Internet
Switch
Authentication Serv ers
( IP address:10.110.91. 164 )
Internet
Switch
Remote user
Internet
Remote user
Internet
Authentication Serv ers
( IP address:10.110.91. 164 )
Internet
Switch
Authentication Serv ers
( IP address:10.110.91. 164 )
Internet
Switch
Authentication s er ver
IP address: 10.110. 91. 164
Internet
Switch
User end
Internet
Authentication Serv ers
( IP address:10.110.91. 164 )
Internet
Switch
Authentication Serv ers
( IP address:10.110.91. 164 )
Internet
Switch
Remote user
Internet
Remote user
Internet
Authentication Serv ers
( IP address:10.110.91. 164 )
Internet
Switch
Authentication Serv ers
( IP address:10.110.91. 164 )
Internet
Switch
Authentication s er ver
IP address: 10.110. 91. 164
Internet
Switch
Remote user
Internet
Authentication Serv ers
( IP address:10.110.91. 164 )
Internet
Switch
Authentication Serv ers
( IP address:10.110.91. 164 )
Internet
Switch
Remote user
Internet
Remote user
Internet
Authentication Serv ers
( IP address:10.110.91. 164 )
Internet
Switch
Authentication Serv ers
( IP address:10.110.91. 164 )
Internet
Switch
Authentication s er ver
IP address: 10.110.91. 164
Internet
Switch
User end
Internet