3Com 3C13636 Configuration Manual page 1046

3Com Router 3000 Ethernet Family
Configuration Guide
[3Com] user-interface vty0 4
[3Com-ui-vty0-4] authentication-mode scheme
# Configure the domain name.
[3Com] domain tacacs
[3Com-isp-tacacs] access-limit enable 10
[3Com-isp-tacacs] accounting optional
[3Com-isp-tacacs] quit
# Configure TACACS schemes.
[3Com] hwtacacs scheme system
[3Com-hwtacacs-system] primary authentication 10.110.91.146
[3Com-hwtacacs-system] primary authorization 10.110.91.146
[3Com-hwtacacs-system] primary accounting 10.110.91.146
[3Com-hwtacacs-system] key authentication expert
[3Com-hwtacacs-system] key authorzation expert
[3Com-hwtacacs-system] key accounting expert
[3Com-hwtacacs-system] user-name-format with-domain
[3Com-hwtacacs-system] quit
# Associate the domain with the TACACS scheme.
[3Com] domain tacacs
[3Com-isp-tacacs] scheme hwtacacs-scheme system
2) Configure the TACACS+ server
Configure IP address
Configure shared keys
Add Telnet username test@ tacacs
Enable one-time password authentication
3) Login process
Configuring one-time password authentication for Telnet users are in these steps:
Figure 2-12 Telnet user login interface
Chapter 2 AAA and RADIUS/HWTACACS Protocol
3Com Corporation
2-45
Configuration