Configuring An Accounting Scheme - Huawei Quidway S2700 Series Configuration Manual

Hide thumbs Also See for Quidway S2700 Series:
Table of Contents

Advertisement

Quidway S2700 Series Ethernet Switches
Configuration Guide - Security
By default, an authorization scheme named default exists on the S2700. This scheme can be
modified but cannot be deleted.
Step 4 Run:
authorization-mode [ hwtacacs ] { if-authenticated | local | none }
The authorization mode is set.
By default, the local authorization mode is used.
If multiple authorization modes are used in an authorization scheme, the if-authenticated mode
or non-authorization mode must be used as the last authorization mode.
When using the HWTACACS authorization mode, you must create an HWTACACS server
template and apply the template to the domain that the user belongs to.
Step 5 (Optional) Run:
authorization-cmd privilege-level hwtacacs [ local ]
The command-line-based authorization function is configured for users at a level.
By default, the command-line-based authorization function is not configured for users at levels
0 to 15.
If command-line authorization is enabled, you must create an HWTACACS server template and
apply the template in the view of the domain that the user belongs to.
----End

1.3.4 Configuring an Accounting Scheme

Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
aaa
The AAA view is displayed.
Step 3 Run:
accounting-scheme accounting-scheme-name
An accounting scheme is created and the accounting scheme view is displayed.
By default, the S2700 provides an accounting scheme named default. This scheme can be
modified but cannot be deleted.
Step 4 Run:
accounting-mode { hwtacacs | radius | none }
Issue 01 (2011-07-15)
NOTE
If multiple authorization modes are used in an authorization scheme, the authentication modes take effect
according to their configuration sequence. The S2700 adopts the next authorization mode only when the
current authorization mode is invalid. The S2700, however, does not adopt any other authorization mode
when users are not authorized in the current authorization mode.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
1 AAA and User Management Configuration
7

Advertisement

Table of Contents
loading

Table of Contents