HP A6600 Configuration Manual page 68

Figure 14 Configure AAA for PPP users by an HWTACACS server
Configuration procedure
Configure the HWTACACS server.
1.
# On the HWTACACS server, set the shared keys for authenticating packets exchanged with the router
to expert. Add the PPP user and specify the password. (Omitted)
Configure the router.
2.
# Create HWTACACS scheme hwtac.
<Router> system-view
[Router] hwtacacs scheme hwtac
# Specify the primary authentication server.
[Router-hwtacacs-hwtac] primary authentication 10.1.1.1 49
# Specify the primary authorization server.
[Router-hwtacacs-hwtac] primary authorization 10.1.1.1 49
# Specify the primary accounting server.
[Router-hwtacacs-hwtac] primary accounting 10.1.1.1 49
# Set the shared keys for authenticating authentication, authorization, and accounting packets to expert.
[Router-hwtacacs-hwtac] key authentication expert
[Router-hwtacacs-hwtac] key authorization expert
[Router-hwtacacs-hwtac] key accounting expert
# Specify the scheme to exclude the domain names from usernames to be sent to the HWTACACS
server.
[Router-hwtacacs-hwtac] user-name-format without-domain
[Router-hwtacacs-hwtac] quit
# Configure the AAA methods for the domain.
[Router] domain bbb
[Router-isp-bbb] authentication ppp hwtacacs-scheme hwtac
[Router-isp-bbb] authorization ppp hwtacacs-scheme hwtac
[Router-isp-bbb] accounting ppp hwtacacs-scheme hwtac
[Router-isp-bbb] ip pool 1 200.1.1.1 200.1.1.99
[Router-isp-bbb] quit
56