AAA Separation 415

Network diagram

Figure108 Network diagram for separate AAA schemes

Configuration procedure
1Enter system view.

<S5500> system-view

2Create an ISP domain named cams.

[S5500] domain cams

3Return to system view.

[S5500-isp-cams] quit

4Configure a RADIUS scheme named radius.

[S5500] radius scheme radius

[S5500-radius-radius] primary accounting 10.110.91.164 1813

[S5500-radius-radius] primary authentication 10.110.91.164 1812

[S5500-radius-radius] key authentication expert

[S5500-radius-radius] user-name-format with-domain

[S5500-radius-radius] quit

5Enter the ISP domain cams.

[S5500] domain cams

6Configure the RADIUS scheme radius as both the authentication and accounting schemes of the ISP domain cams, and allow users in this ISP domain to use network services without being authorized.

[S5500-isp-cams] authentication radius-scheme radius

[S5500-isp-cams] accounting radius-scheme radius

[S5500-isp-cams] authorization none

Enabling/Disabling theMessenger AlertMessenger alert function allows the clients to inform the online users about their remaining online time through the message alert dialog box. The implementation of this function is as follows:
On the switch, use the following command to enable this function and to
configure the remaining-online-time threshold (the limit argument) and the alert message interval.
Authentication Serv ers
( IP address:10.110.91. 164 )
Internet
Switch
Remote user
Internet
Authentication Serv ers
( IP address:10.110.91. 164 )
Internet
Switch
Authentication s er ver
IP address: 10.110. 91. 164
Internet
Switch
Remote user
Internet
Authentication Serv ers
( IP address:10.110.91. 164 )
Internet
Switch
Authentication Serv ers
( IP address:10.110.91. 164 )
Internet
Switch
Remote user
Internet
Remote user
Internet
Authentication Serv ers
( IP address:10.110.91. 164 )
Internet
Switch
Authentication Serv ers
( IP address:10.110.91. 164 )
Internet
Switch
Authentication s er ver
IP address: 10.110. 91. 164
Internet
Switch
User end
Internet
Authentication Serv ers
( IP address:10.110.91. 164 )
Internet
Switch
Authentication Serv ers
( IP address:10.110.91. 164 )
Internet
Switch
Remote user
Internet
Remote user
Internet
Authentication Serv ers
( IP address:10.110.91. 164 )
Internet
Switch
Authentication Serv ers
( IP address:10.110.91. 164 )
Internet
Switch
Authentication s er ver
IP address: 10.110. 91. 164
Internet
Switch
Remote user
Internet
Authentication Serv ers
( IP address:10.110.91. 164 )
Internet
Switch
Authentication Serv ers
( IP address:10.110.91. 164 )
Internet
Switch
Remote user
Internet
Remote user
Internet
Authentication Serv ers
( IP address:10.110.91. 164 )
Internet
Switch
Authentication Serv ers
( IP address:10.110.91. 164 )
Internet
Switch
Authentication s er ver
IP address: 10.110.91. 164
Internet
Switch
User end
Internet
Authentication Serv ers
( IP address:10.110.91. 164 )
Internet
Switch
Authentication Serv ers
( IP address:10.110.91. 164 )
Internet
Switch
Remote user
Internet
Remote user
Internet
Authentication Serv ers
( IP address:10.110.91. 164 )
Internet
Switch
Authentication Serv ers
( IP address:10.110.91. 164 )
Internet
Switch
Authentication s er ver
IP address: 10.110. 91. 164
Internet
Switch
Remote user
Internet
Authentication Serv ers
( IP address:10.110.91. 164 )
Internet
Switch
Authentication Serv ers
( IP address:10.110.91. 164 )
Internet
Switch
Remote user
Internet
Remote user
Internet
Authentication Serv ers
( IP address:10.110.91. 164 )
Internet
Switch
Authentication Serv ers
( IP address:10.110.91. 164 )
Internet
Switch
Authentication s er ver
IP address: 10.110. 91. 164
Internet
Switch
User end
Internet
Authentication Serv ers
( IP address:10.110.91. 164 )
Internet
Switch
Authentication Serv ers
( IP address:10.110.91. 164 )
Internet
Switch
Remote user
Internet
Remote user
Internet
Authentication Serv ers
( IP address:10.110.91. 164 )
Internet
Switch
Authentication Serv ers
( IP address:10.110.91. 164 )
Internet
Switch
Authentication s er ver
IP address: 10.110. 91. 164
Internet
Switch
Remote user
Internet
Authentication Serv ers
( IP address:10.110.91. 164 )
Internet
Switch
Authentication Serv ers
( IP address:10.110.91. 164 )
Internet
Switch
Remote user
Internet
Remote user
Internet
Authentication Serv ers
( IP address:10.110.91. 164 )
Internet
Switch
Authentication Serv ers
( IP address:10.110.91. 164 )
Internet
Switch
Authentication s er ver
IP address: 10.110.91. 164
Internet
Switch
User end
Internet