Configuration Example Of Separate Aaa Schemes For Ppp Users - 3Com 3C13636 Configuration Manual

3Com Router 3000 Ethernet Family
Configuration Guide
[3Com-hwtacacs-hwtac] key authentication expert
[3Com-hwtacacs-hwtac] key authorization expert
[3Com-hwtacacs-hwtac] key accounting expert
[3Com-hwtacacs-hwtac] user-name-format with-domain
[3Com-hwtacacs -hwtac] quit
# Associate the domain with the hwtacacs.
[3Com] domain hwtacacs
[3Com-isp-hwtacacs] scheme hwtacacs-scheme hwtac
[3Com-isp-hwtacacs] ip pool 1 200.1.1.1 200.1.1.99
[3Com-isp-hwtacacs] quit
# Configure the serial interface.
[3Com] interface serial 0/0/0
[3Com-Serial0/0/0] link-protocol ppp
[3Com-Serial0/0/0] ppp authentication-mode pap domain hwtacacs
[3Com-Serial0/0/0] ip address 188.188.188.2 255.255.255.0
[3Com-Serial0/0/0] remote address pool 1
# Configure the Ethernet interface.
[3Com-Serial0/0/0] interface ethernet 1/0/0
[3Com-ethernet 1/0/0] ip address 10.110.91.160 255.255.255.0

2.6.4 Configuration Example of Separate AAA Schemes for PPP Users

I. Network requirements
In the environment shown in the following figure, a RADIUS server is required to assign
IP addresses to PPP users and implement authentication and authorization, and a
TACACS server is required to implement accounting.
The IP address of the RADIUS server is 10.110.91.145, and the shared key for the
router and the RADIUS server is router. Set the router to remove the domain name in a
user name and then transfer the resulted part to the RADIUS server.
The IP address of the TACACS server is 10.110.91.146, and the shared key for the
router and the TACACS server is expert. Set the router to remove the domain name in a
user name and then transfer the resulted part to the TACACS server.
Chapter 2 AAA and RADIUS/HWTACACS Protocol
3Com Corporation
2-42
Configuration