Firewall User Management Technologies

What this chapter covers

Firewall User Management Technologies is 10% of the Huawei HCIA-Security H12-711 exam. It covers the AAA framework of authentication, authorization and accounting, the local, RADIUS and HWTACACS schemes, and how a USG firewall authenticates administrators, internet access users and access users before it applies user based policies.

Questions are single-answer, multiple-answer without a stated count, true/false, drag and drop and typed fill-in-the-blank, often "Which of the following statements is true?". Some show a firewall topology figure with users, an authentication server and the internet, or a short aaa or authentication policy configuration, and ask which user is authenticated and how.

It has 2 outline topics, and two pages cover them.

How the topics fit together

AAA is the general framework that answers who you are, what you may do and what you did. The firewall then uses AAA to identify each type of user, so its security policies can match users and groups instead of only IP addresses.

Users are organized in a tree of user groups under an authentication domain, much like folders, so one policy can cover a whole department.

How to use these pages

Each topic page has the same shape, so you can skim for what you need.

• What it is: the idea in plain words.
• How it works: the mechanism, with tables and examples.
• What to remember for the exam: the facts to memorize.
• Common mistakes: the classic traps.
• Check yourself: three questions to test your understanding.

Read each configuration snippet and say what it does before reading the explanation. The exam often shows a short configuration and asks which traffic is permitted, translated or allowed to log in.