Configuration Example Of Hwtacacs Authentication (Management User) - Huawei SmartAX MA5603T Configuration Manual

SmartAX MA5600T/MA5603T/MA5608T Multi-service
Access Module
Commissioning and Configuration Guide
Step 10 Bind the HWTACACS server template.
You can use an HWTACACS server template in a domain only after the HWTACACS server
template is created.
huawei(config-aaa-domain-isp1)#hwtacacs-server hwtest
----End
Result
User 1 in ISP 1 can pass authentication only if both the user name and password are correct, and
then can log in to the MA5600T/MA5603T/MA5608T. Then, the user starts to be accounted.
Configuration File
aaa
authentication-scheme newscheme
authentication-mode hwtacacs
quit
authorization-scheme newscheme
authorization-mode hwtacacs
quit
accounting-scheme newscheme
accounting-mode hwtacacs
accounting interim interval 10
quit
quit
hwtacacs-server template hwtest
hwtacacs-server authentication 10.10.66.66
hwtacacs-server authentication 10.10.66.67 secondary
hwtacacs-server authorization 10.10.66.66
hwtacacs-server authorization 10.10.66.67 secondary
hwtacacs-server accounting 10.10.66.66
hwtacacs-server accounting 10.10.66.67 secondary
quit
dot1x enable
dot1x service-port 1
dot1x service-port 2
dot1x service-port 3
dot1x dhcp-trigger enable
dot1x keepalive retransmit 1 interval 20 service-port 1
dot1x keepalive retransmit 1 interval 20 service-port 2
dot1x keepalive retransmit 1 interval 20 service-port 3
dot1x eap-end service-port 1
dot1x eap-end service-port 2
dot1x eap-end service-port 3
domain
isp1
authentication-scheme newscheme
authorization-scheme newscheme
accounting-scheme newscheme
hwtacacs-server hwtest
2.4.6 Configuration Example of HWTACACS Authentication
(Management User)
The MA5600T/MA5603T/MA5608T allows the management user of the device to log in to the
system by the HWTACACS authentication mode.
Issue 01 (2014-04-30) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
2 Basic Configurations
247