3Com MSR 50 Series Configuration Manual page 1785

Network diagram
Figure 519 Configure AAA for PPP users by a TACACS Server
v
PSTN
PPP user
Configuration procedure
# Configure the HWTACACS scheme.
<Router> system-view
[Router] hwtacacs scheme hwtac
[Router-hwtacacs-hwtac] primary authentication 10.1.1.1 49
[Router-hwtacacs-hwtac] primary authorization 10.1.1.1 49
[Router-hwtacacs-hwtac] primary accounting 10.1.1.1 49
[Router-hwtacacs-hwtac] key authentication expert
[Router-hwtacacs-hwtac] key authorization expert
[Router-hwtacacs-hwtac] key accounting expert
[Router-hwtacacs-hwtac] user-name-format without-domain
[Router-hwtacacs -hwtac] quit
# Apply the AAA schemes to the domain.
[Router] domain 1
[Router-isp-1] authentication ppp hwtacacs-scheme hwtac
[Router-isp-1] authorization ppp hwtacacs-scheme hwtac
[Router-isp-1] accounting ppp hwtacacs-scheme hwtac
[Router-isp-1] ip pool 1 200.1.1.1 200.1.1.99
[Router-isp-1] quit
# Configure the default AAA schemes for all types of users.
[Router] domain 1
[Router-isp-1] authentication default hwtacacs-scheme hwtac
[Router-isp-1] authorization default hwtacacs-scheme hwtac
[Router-isp-1] accounting default hwtacacs-scheme hwtac
[Router-isp-1] ip pool 1 200.1.1.1 200.1.1.99
[Router-isp-1] quit
# Configure the serial interface.
[Router] interface serial 2/0
[Router-Serial2/0] link-protocol ppp
[Router-Serial2/0] ppp authentication-mode pap domain 1
[Router-Serial2/0] ip address 2.2.2.1 255.255.255.0
[Router-Serial2/0] remote address pool 1
[Router-Serial2/0] quit
# Configure the Ethernet interface.
AAA/RADIUS/HWTACACS Configuration Example
Authentication / Authorization /
Accounting server
10.1.1.1 /24
Eth1/0
10.1.1.2 /24
S2 /0
2.2.2 .1/24
v
Router
1785
Internet