H3C S5500-EI series Operation Manual page 915

Operation Manual – AAA RADIUS HWTACACS
H3C S5500-EI Series Ethernet Switches
User
4) Request for username
5) The user enters the username
9) The user enters the password
14) The user logs in successfully
Figure 1-6 Basic message exchange process of HWTACACS for a Telnet user
1) A Telnet user applies to access the NAS.
2) Upon receiving the request, the HWTACACS client sends a start-authentication
packet to the HWTACACS server.
3) The HWTACACS server sends back an authentication response requesting the
username.
4) Upon receiving the request, the HWTACACS client asks the user for the
username.
5) The user enters the username.
6) After receiving the username from the user, the HWTACACS client sends to the
server a continue-authentication packet carrying the username.
HWTACACS client
1) The user logs in
8) Request for password
17) The user logs off
Chapter 1 AAA/RADIUS/HWTACACS
2) Start-authentication packet
3) Authentication response requesting the username
6) Authentication continuance packet with the
username
7) Authentication response requesting the login
password
10) Authentication continuance packet with the
login password
11) Authentication response indicating successful
authentication
12) User authorization request packet
13) Authorization response indicating successful
authorization
15) Start-accounting request
16) Accounting response indicating the start of
accounting
18) Stop-accounting request
19) Stop-accounting response
1-11
Configuration
HWTACACS server