Filter
Top Products
DES-7200 Configuration Guide Chapter 1 AAA Configuration
1-29
Command Function
aaa new-model
Turn on the AAA switch.
aaa local authentication attempts
<1-2147483647>
Configure attempt times of login user.
aaa local authentication
lockout-time<1-2147483647>
Configure lockout-time(hour) when the user has
attempted more than the limited times.
show aaa user lockout {all |
user-name <word>}
Display current lockout user list.
clear aaa local user lockout {all |
user-name <word>}
Clear lockout user list.
Note
By default, login attempt times are 3 and the lockout time is restricted to be
15 hours.
1.9 Configuring
Domain-name-based
AAA Service
The domain-name-based AAA service configurations include:
Overview
Domain-name-based AAA service configuration tasks
Domain-name-based AAA service configuration note
Domain-name-based AAA service configuration example
Caution
The domain-name-based AAA service is applied to the IEEE802.1x
authentication service. For the detailed IEEE802.1x protocol configurations,
please refer to the chapter of 802.1x Configuration.
1.9.1 Overview
In the multi-domain environment, one NAS(Network Access Switch) can provide the AAA
service for the users in different domains. Due to the different user attributes(such as the
username, password, service type, privilege, ect) in each domain, it needs to tell them apart by
setting the domain method and set the attribute collection for each domain, including the AAA
service method list.