When Switch Acts As Server For Password And Hwtacacs Authentication - 3Com 4500 PWR 26-Port Configuration Manual

authentication succeeds, you will log in to the server. The level of commands that you can access after
login is authorized by the CAMS server. You can specify the level by setting the EXEC Privilege Level
argument in the Add Account window shown in

When Switch Acts as Server for Password and HWTACACS Authentication

Network requirements
As shown in Figure
(SSH server) for secure data exchange. Password and HWTACACS authentication is required.
The host runs SSH2.0 client software to establish a local connection with the switch.
The switch cooperates with an HWTACACS server to authenticate SSH users.
Network diagram
Figure 55-19 Switch acts as server for password and HWTACACS authentication
Configuration procedure
Configure the SSH server
# Create a VLAN interface on the switch and assign it an IP address. This address will be used as the IP
address of the SSH server for SSH connections.
<Switch> system-view
[Switch] interface vlan-interface 2
[Switch-Vlan-interface2] ip address 192.168.1.70 255.255.255.0
[Switch-Vlan-interface2] quit
Generating the RSA key pair on the server is prerequisite to SSH login.
# Generate RSA key pair.
[Switch] public-key local create rsa
# Set the authentication mode for the user interfaces to AAA.
[Switch] user-interface vty 0 4
[Switch-ui-vty0-4] authentication-mode scheme
55-19, an SSH connection is required between the host (SSH client) and the switch
Figure 55-16.