Huawei Quidway S9300 Configuration Manual page 69

Quidway S9300 Terabit Routing Switch
Configuration Guide - Security
[Quidway-aaa-domain-huawei] quit
[Quidway-aaa] quit
Step 4 Verify the configuration.
Run the display hwtacacs-server template command on S9300-B, and you can see that the
configuration of the HWTACACS server template meets the requirements.
<Quidway> display hwtacacs-server template ht
---------------------------------------------------------------------------
HWTACACS-server template index
HWTACACS-server template name
Primary-authentication-server
Primary-authorization-server
Primary-accounting-server
Secondary-authentication-server : 129.7.66.67:49
Secondary-authorization-server
Secondary-accounting-server
Current-authentication-server
Current-authorization-server
Current-accounting-server
Source-IP-address
Shared-key
Quiet-interval(min)
Response-timeout-Interval(sec)
Domain-included
Traffic-unit
---------------------------------------------------------------------------
Run the display domain command on S9300-B, and you can see that the configuration of the
domain meets the requirements.
<Quidway> display domain name huawei
Domain-name
Domain-state
Authentication-scheme-name
Accounting-scheme-name
Authorization-scheme-name
Service-scheme-name
RADIUS-server-group
Accounting-copy-RADIUS-group
Hwtacacs-server-template
----End
Configuration Files
#
sysname Quidway
#
hwtacacs-server template ht
hwtacacs-server authentication 129.7.66.66
hwtacacs-server authentication 129.7.66.67 secondary
hwtacacs-server authorization 129.7.66.66
hwtacacs-server authorization 129.7.66.67 secondary
hwtacacs-server accounting 129.7.66.66
hwtacacs-server accounting 129.7.66.67 secondary
hwtacacs-server shared-key cipher 3MQ*TZ,O3KCQ=^Q`MAF4<1!!
#
aaa
authentication-scheme default
authentication-scheme l-h
authentication-mode local hwtacacs
authentication-super hwtacacs super
authorization-scheme default
authorization-scheme hwtacacs
authorization-mode
Issue 06 (2010–01–08)
: 0
: ht
: 129.7.66.66:49
: 129.7.66.66:49
: 129.7.66.66:49
: 129.7.66.67:49
: 129.7.66.67:49
: 129.7.66.66:49
: 129.7.66.66:49
: 129.7.66.66:49
: 0.0.0.0
: 3MQ*TZ,O3KCQ=^Q`MAF4<1!!
: 5
: 5
: Yes
: B
: huawei
: Active
: l-h
: hwtacacs
: hwtacacs
: -
: -
: -
: ht
hwtacacs
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
1 AAA and User Management Configuration
1-47