Optional) Setting The Shared Key Of An Hwtacacs Server - Huawei Quidway S2700 Series Configuration Manual

Quidway S2700 Series Ethernet Switches
Configuration Guide - Security
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
hwtacacs-server template template-name
The HWTACACS server template view is displayed.
Step 3 Run:
hwtacacs-server source-ip ip-address
The source IP address of HWTACACS packets is configured.
By default, the source IP address of an HWTACACS packet is 0.0.0.0. In this case, the S2700
uses the IP address of the outgoing VLANIF interface as the source IP address of the
HWTACACS packet.
After you specify the source IP address of HWTACACS packets, the specified address is used
for the communication between the S2700 and the HWTACACS server. In this case, the
HWTACACS server uses the specified IP address to communicate with the S2700.
----End

1.5.7 (Optional) Setting the Shared Key of an HWTACACS Server

Context
Setting the shared key ensures the security of communication between the S2700 and an
HWTACACS server. To ensure the validity of the authenticator and the authenticated, the shared
keys set on the S2700 and the HWTACACS server must be the same.
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
hwtacacs-server template template-name
The HWTACACS server template view is displayed.
Step 3 Run:
hwtacacs-server shared-key [ cipher | simple ] key-string
The shared key is set for the HWTACACS server.
By default, no shared key is set for the HWTACACS server.
----End
Issue 01 (2011-07-15) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
1 AAA and User Management Configuration
21