Huawei Quidway S2700 Series Configuration Manual page 54

Quidway S2700 Series Ethernet Switches
Configuration Guide - Security
Figure 1-2 Networking diagram of HWTACACS authentication, accounting, and authorization
Configuration Roadmap
The configuration roadmap is as follows:
1.
2.
3.
Data Preparation
To complete the configuration, you need the following data:
l
l
l
l
l
Procedure
Step 1 Configure an HWTACACS server template.
Issue 01 (2011-07-15)
Domain Huawei
SwitchA
Configure an HWTACACS server template.
Configure the authentication, authorization, and accounting schemes.
Apply the HWTACACS server template, authentication, authorization, and accounting
schemes to the domain.
Name of the domain that the user belongs to
Name of the HWTACACS server template
Name of the authentication scheme, authentication mode, name of the authorization
scheme, authorization mode, name of the accounting scheme, and accounting mode
IP addresses, authentication port numbers, authorization port numbers, and accounting port
numbers of the primary and secondary HWTACACS servers
Key of the HWTACACS server
NOTE
The following configurations are performed on Switch B.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
1 AAA and User Management Configuration
SwitchB
Network
Destination
Network
129.7.66.66/24
129.7.66.67/24
43