Configuring Hwtacacs; Recommended Configuration Procedure; Creating The Hwtacacs Scheme System - HP FlexNetwork NJ5000 User Manual

Configuring HWTACACS

HW Terminal Access Controller Access Control System (HWTACACS) is an enhanced security
protocol based on TACACS (RFC 1492). HWTACACS is similar to RADIUS, and it uses a
client/server model for information exchange between the network access server (NAS) and the
HWTACACS server.
HWTACACS typically provides AAA services for PPP, VPDN, and terminal users. In a typical
HWTACACS scenario, terminal users need to log in to the NAS. Working as the HWTACACS client,
the NAS sends users' usernames and passwords to the HWTACACS sever for authentication. After
passing authentication and obtaining authorized rights, a user logs in to the device and performs
operations. The HWTACACS server records the operations that each user performs.

Recommended configuration procedure

Step
Creating the HWTACACS
1.
scheme system
Configuring HWTACACS
2.
servers for the scheme
Configuring HWTACACS
3.
communication parameters
for the scheme

Creating the HWTACACS scheme system

From the navigation tree, select Authentication > HWTACACS.
1.
The page for adding an HWTACACS scheme appears, as shown in
Figure 328 Adding an HWTACACS scheme
Click Add.
2.
The Add HWTACACS Scheme page appears, as shown in
Remarks
Required.
Create an HWTACACS scheme named system.
By default, no HWTACACS scheme exists.
IMPORTANT:
From the Web interface, only one HWTACACS scheme can be
configured, and the scheme is named system.
Authentication server and authorization server are mandatory and
accounting server is optional.
Specify the primary and the secondary HWTACACS servers.
By default, no servers are specified.
IMPORTANT:
If redundancy is not required, specify only the primary AAA servers.
Optional.
This section describes how to configure the parameters that are
necessary for information exchange between the device and
HWTACACS servers.
309
Figure 328.
Figure 329.