Huawei SmartAX MA5616 Configuration Manual page 119

SmartAX MA5616 Multi-service Access Module
Configuration Guide
Service Requirements
l
l
l
l
l
l
l
Networking
Figure 3-32
Figure 3-32 Example network of HWTACACS authentication
user1@isp1
user2@isp2
user3@isp3
Procedure
Step 1 Configure the authentication scheme.
Configure authentication scheme named login-auth (users are authenticated through
HWTACACS protocol).
huawei(config)#aaa
huawei(config-aaa)#authentication-scheme login-auth
huawei(config-aaa-authen-login-auth)#authentication-mode hwtacacs
huawei(config-aaa-authen-login-auth)#quit
Step 2 Configure the HWTACACS protocol.
Issue 04 (2011-10-30)
Prefer the HWTACACS server to authenticate management user of domain isp1.
Local authentication can be used when the HWTACACS server is unreachable.
The user logs in to the server carrying the domain name.
The HWTACACS server with the IP address 129.7.66.66 functions as the primary server
for authentication.
The HWTACACS server with the IP address 129.7.66.67 functions as the secondary server
for authentication.
The authentication port ID is 1812.
Other parameters adopt the default settings.
shows the example network of HWTACACS authentication.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
HWTACACS server
(Master)
129.7.66.66
Telnet
MA5600T
MA5616
3 Basic Configuration
HWTACACS server
(Backup)
129.7.66.67
108