3com 3.01.01 Benutzerhandbuch

C

HAPTER

 9: AAA 

AND

 RADIUS O

PERATION

Figure 3   Networking with Switch 8800 Applying RADIUS Authentication 

Configuring the AAA and RADIUS Protocols is described in the following sections:

■

■

■

AAA configuration includes tasks that are described in the following sections:

■

■

■

■

■

Among the above configuration tasks, creating an ISP domain is required, 
otherwise the supplicant attributes cannot be distinguished. The other tasks are 
optional. You can configure them at requirements. 

An Internet Service Provider (ISP) domain is a group of users who belong to the 
same ISP. Taking gw20010608@3com163.net as an example in the 
userid@isp-name format, the isp-name (i.e. 3com163.net) following the @ is the 
ISP domain name. When the Switch 8800 control user access, as for an ISP user 
whose username is in userid@isp-name format, the system will take userid part as 
username for identification and take isp-name part as domain name.

The purpose of introducing ISP domain settings is to support the multi-ISP 
application environment. In such an environment, one access device might access 
users of different ISP. Because the attributes of ISP users, such as username and 
password formats, etc., may be different, it is necessary to differentiate them by 
setting ISP domain. In the Switch 8800 ISP domain view, you can configure a 

PC use1

PC user2

PC user3

PC user4

Switch 7700

Switch 7700

Switch 7700

Switch 7700

Internet

ISP1

ISP2

Authentication
server

Accounting
server1