3Com MSR 50 Series Configuration Manual page 1759

Figure 516 Basic message exchange process of HWTACACS for a Telnet user
U ser
T he user l o gs i n
R equest f o r usernam e
U sernam e
R equest f o r passw ord
P assw ord
T he user l o gs i n successf u l l y
T he user exi t s
1 A user requests to access the NAS. Upon receiving the request, the HWTACACS
client sends a start-authentication packet to the TACACS server.
2 The HWTACACS server sends back an authentication response requesting for the
username. Upon receiving the request, the HWTACACS client asks the user for the
username.
3 After receiving the username from the user, the HWTACACS client sends to the
server an authentication continuance packet carrying the username.
4 The HWTACACS server sends back an authentication response, requesting for the
login password. Upon receipt of the response, the HWTACACS client requests the
user for the login password.
5 After receiving the login password, the HWTACACS client sends to the
HWTACACS server an authentication continuance packet carrying the login
password.
AAA/RADIUS/HWTACACS Configuration Overview
H W T A C A C S
cl i e nt
S t a rt -aut h ent i c at i o n packet
A ut h ent i c at i o n response request i n g t h e usernam e
A ut h ent i c at i o n cont i n uance packet w i t h t h e
usernam e
A ut h ent i c at i o n response request i n g t h e l o gi n
passw ord
A ut h ent i c at i o n cont i n uance packet w i t h t h e l o gi n
passw ord
A ut h ent i c at i o n response i n di c at i n g successf u l
aut h ent i c at i o n
U ser aut h ori z at i o n packet
A ut h ori z at i o n response i n di c at i n g successf u l
aut h ori z at i o n
S t a rt-account i n g request
A ccount i n g response i n di c at i n g t h e st a rt of
account i n g
S t o p-account i n g request
S t o p-account i n g response
1759
H W T A C A C S
server