Configuring The Attributes For Data To Be Sent To Tacacs Servers - Huawei Quidway S3900 Series Operation Manual

Operation Manual – AAA & RADIUS & HWTACACS & EAD
Quidway S3900 Series Ethernet Switches-Release 1510
Operation
Set a shared key
for
HWTACACS
accounting/authen
tication/authorizati
on packets

1.5.6 Configuring the Attributes for Data to be Sent to TACACS Servers

Table 1-29 Configure the attributes for data to be sent to TACACS servers
Operation
Enter
view
Create
HWTACACS
scheme
enter its view
Set the format
of the
names to be
sent
TACACS
servers
Set the units of
measure
data flows sent
to TACACS
servers
Set the source
IP address
used by
switch to send
HWTACACS
packets
Command
the
key {
authorization
authentication } string
Command
system
system-view
a
hwtacacs
and hwtacacs-scheme-name
user
user-name-format
{ with-domain
to
without-domain }
data-flow-format data { byte |
giga-byte
for
mega-byte }
data-flow-format
{ giga-packet | kilo-packet |
mega-packet | one-packet }
HWTACACS view
nas-ip ip-address
the
System view
hwtacacs nas-ip ip-address
Huawei Technologies Proprietary
Chapter 1 AAA & RADIUS & HWTACACS
Required
accounting |
|
By default, the TACACS server
does not have a key.
—
Required
scheme
By default, no HWTACACS
scheme exists.
Optional
By default, the user names
|
sent
TACACS servers carry ISP
domain names.
Optional
| kilo-byte |
By default, in a TACACS
scheme, the unit of measure
packet
for data is byte and that for
packets is one-packet.
Optional
By default, no source IP
address is specified; the IP
address
interface is used as the source
IP address.
1-39
Configuration
Description
Description
from the switch
of the outbound
to