Figure 15-2 SSH Login Window
The hostname is the in-band/out-of-band NM IP address of the ZXA10 C300.
15.2 Configuring TACACS+
TACACS+
and authorization for remote subscribers who access the ZXA10 C300.
Context
TACACS+ supports two login modes:
l
Telnet
l
SSH
Steps
1. Configure telnet user authentication type.
ZXAN(config)#user-authentication-type aaa
2. Configure telnet user authorization type.
ZXAN(config)#user-authorization-type aaa
3. Configure
ZXAN(config)#ssh server authentication mode aaa
4. Enable TACACS+.
ZXAN(config)#tacacs enable
5. Configure TACACS+ server.
SJ-20130520164529-007|2013-06-30 (R1.0)
Note:
ensures data safety of the ZXA10 C300 by implementing safety authentication
SSH
server authentication mode.
Chapter 15 System Security Configuration
15-3
ZTE Proprietary and Confidential