DES-7200 Configuration Guide Chapter 1 AAA Configuration
1-22
1.4.5 Configuring AAA
Network Authorization
Our product support the network authorization over the network connection including PPP,
SLIP. The network authorization makes the network connection obtain the service like
traffic, bandwidth, timeout, ect. The network authorization only support the RADIUS. The
authorization information assigned from the server are encapsulated in the RADIUS
attribute. For different network connection application, it is possible that these
authorization information are different.
Caution
Now the configuration does not support the 802.1X AAA authorization, while
the 802.1X is implemented by using other commands. For the details of the
802.1X authorization, see Configuring 802.1X.
To configure the AAA network authorization, run the following commands in the global
configuration mode:
Command Function
configure terminal
Enter the global configuration mode.
aaa new-model
Turn on the AAA switch.
aaa authorization network{default |
list-name} method1 [method2|…]
Define the AAA network authorization method. If
you need to define multiple methods, execute
this command repeatedly.
The keyword "list-name" is used to name the created authorization method list, which can
be any string. The keyword "method" means the actual algorithm for authorization. Only
when the current method returns ERROR (no reply), the next authorization method will be
attempted. If the current method returns FAIL, no authorization method will be used any
more. To make the authorization return successfully, even if no specified methods reply, it
is possible to specific "none" as the last authorization method.
1.4.5.1 Using Radius for network
authorization
To configure the use of RADIUS server for network authorization, it is required to first
configure the RADIUS server. For the details of the RADIUS server configuration, see
Configuring RADIUS.
After configuring the RADIUS server, the RADIUS server-based method list can be
configured. Run the following commands in the global configuration mode:
Command Function
configure terminal
Enter the global configuration mode.
aaa new-model
Turn on the AAA switch.