Table of Contents
Advertisement
Figure 1-6 Basic message exchange process of HWTACACS for a Telnet user
Host
1) The user logs in
4) Request for username
5) The user inputs the username
8) Request for password
9) The user inputs the password
14) The user logs in successfully
17) The user logs off
2)
A Telnet user sends an access request to the NAS.
3)
Upon receiving the request, the HWTACACS client sends a start-authentication packet to the
HWTACACS server.
4)
The HWTACACS server sends back an authentication response requesting the username.
5)
Upon receiving the response, the HWTACACS client asks the user for the username.
6)
The user inputs the username.
7)
After receiving the username from the user, the HWTACACS client sends to the server a
continue-authentication packet carrying the username.
8)
The HWTACACS server sends back an authentication response, requesting the login password.
9)
Upon receipt of the response, the HWTACACS client asks the user for the login password.
10) The user inputs the password.
11) After receiving the login password, the HWTACACS client sends to the HWTACACS server a
continue-authentication packet carrying the login password.
12) The HWTACACS server sends back an authentication response indicating that the user has
passed authentication.
HWTACACS client
2) Start-authentication packet
3) Authentication response requesting the username
6) Authentication continuance packet with the
7) Authentication response requesting the login
10) Authentication continuance packet with the
11) Authentication response indicating successful
12) User authorization request packet
13) Authorization response indicating successful
15) Start-accounting request
16) Accounting response indicating the start of
18) Stop-accounting request
19) Stop-accounting response
1-9
HWTACACS server
username
password
login password
authentication
authorization
accounting
Hide quick links:
Advertisement
Chapters
Table of Contents
Troubleshooting
