Zte ZXR10 ZSR V2 Configuration Manual (System Management page 57

Chapter 4 User Management
2. Configure an authentication template.
3. Configure an authorization template.
4. Configure an "enable" password to raise the user's privilege level.
Configuration Commands
Run the following commands on the ZXR10 ZSR V2:
R1(config)#tacacs enable
R1(config)#tacacs-server host 10.1.1.1 key zte
R1(config)#tacplus group-server ztegroup
R1(config-sg)#server 10.1.1.1
R1(config-sg)#exit
R1(config)#system-user
R1(config-system-user)#authentication-template 1
R1(config-system-user-authen-temp)#bind aaa-authentication-template 2001
R1(config-system-user-authen-temp)#exit
R1(config-system-user)#authorization-template 1
R1(config-system-user-author-temp)#bind aaa-authorization-template 2001
R1(config-system-user-author-temp)#local-privilege-level 5
R1(config-system-user-author-temp)#exit
R1(config-system-user)#user-name zte
R1(config-system-user-username)#bind authentication-template 1
R1(config-system-user-username)#bind authorization-templat 1
R1(config-system-user-username)#password zte
R1(config-system-user-username)#exit
R1(config-system-user)#exit
R1(config)#aaa-authentication-template 2001
R1(config-aaa-authen-template)#aaa-authentication-type tacacs-local
R1(config-aaa-authen-template)#authentication-tacacs-group ztegroup
R1(config-aaa-authen-template)#exit
R1(config)#aaa-authorization-template 2001
R1(config-aaa-author-template)#aaa-authorization-type none
R1(config-aaa-author-template)#exit
The following provides a global "enable" authentication configuration mode, which can be
set to aaa mode or local mode. The aaa mode means using the "enable" password set by
the server.
R1(config)#system-user
R1(config-system-user)#global-enable-type aaa authentication-template 1
/*Configures user's enable command authentication mode.*/
R1(config-system-user)#exit
4-19
SJ-20140504150128-007|2014-05-10 (R1.0) ZTE Proprietary and Confidential