Figure 1-2 Networking Diagram Of Hwtacacs Authentication, Accounting, And Authorization - Huawei Quidway S9300 Configuration Manual

Quidway S9300 Terabit Routing Switch
Configuration Guide - Security
l

Figure 1-2 Networking diagram of HWTACACS authentication, accounting, and authorization

Configuration Roadmap
The configuration roadmap is as follows:
1.
2.
3.
Data Preparation
To complete the configuration, you need the following data:
l
l
l
l
l
Issue 06 (2010–01–08)
The primary HWTACACS server is 129.7.66.66/24, and the IP address of the secondary
HWTACACS server is 129.7.66.67/24. The port number of the server for authentication,
accounting, and authorization is 49.
Domain Huawei
S9300-A
Configure an HWTACACS server template.
Configure the authentication, authorization, and accounting schemes.
Apply the HWTACACS server template, authentication, authorization, and accounting
schemes to the domain.
Name of the domain that the user belongs to
Name of the HWTACACS server template
Name of the authentication scheme, authentication mode, name of the authorization
scheme, authorization mode, name of the accounting scheme, and accounting mode
IP addresses, authentication port numbers, authorization port numbers, and accounting port
numbers of the primary and secondary HWTACACS servers
Key of the HWTACACS server
NOTE
The following configurations are performed on S9300-B.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
1 AAA and User Management Configuration
S9300-B
Network
Destination
Network
129.7.66.66/24
129.7.66.67/24
1-45