Scribd Logo
Upload

Welcome to Scribd!

  • Tacacs Huawei

    Uploaded by

    roccaeder
    78 views1 page
    The document configures TACACS+ authentication, authorization, and accounting for the domain "myadmin" on a Cisco device. It defines a TACACS+ server template using two backup servers, configures AAA schemes to use TACACS+, and applies the schemes and server template to the domain. It also configures command recording on the TACACS+ servers.

    Original Description:

    configuracion de tacacs huawei

    Original Title

    tacacsHuawei

    Copyright

    © © All Rights Reserved

    Available Formats

    TXT, PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Report this Document
    The document configures TACACS+ authentication, authorization, and accounting for the domain "myadmin" on a Cisco device. It defines a TACACS+ server template using two backup servers, configures AAA schemes to use TACACS+, and applies the schemes and server template to the domain. It also configures command recording on the TACACS+ servers.

    Copyright:

    © All Rights Reserved
    Download as TXT, PDF, TXT or read online from Scribd
    Flag for inappropriate content
    Download as txt, pdf, or txt
    78 views1 page

    Tacacs Huawei

    Uploaded by

    roccaeder
    The document configures TACACS+ authentication, authorization, and accounting for the domain "myadmin" on a Cisco device. It defines a TACACS+ server template using two backup servers, configures AAA schemes to use TACACS+, and applies the schemes and server template to the domain. It also configures command recording on the TACACS+ servers.

    Copyright:

    © All Rights Reserved
    Download as TXT, PDF, TXT or read online from Scribd
    Flag for inappropriate content
    Download as txt, pdf, or txt
    of 1

    Set domain name myadmin

    domain myadmin admin


    #

    Configure TACACS+ server template. Shared key is same as configured on ACS

    #
    hwtacacs-server template TAC-AAA
    hwtacacs-server authentication 192.168.3.20
    hwtacacs-server authentication 192.168.4.20 secondary
    hwtacacs-server authorization 192.168.3.20
    hwtacacs-server authorization 192.168.4.20 secondary
    hwtacacs-server accounting 192.168.3.20
    hwtacacs-server accounting 192.168.4.20 secondary
    hwtacacs-server source-ip 192.168.150.20
    hwtacacs-server shared-key cipher huawei
    #

    Configure AAA schemes. Also configure recording scheme for commands accounting on
    ACS server.

    #
    aaa
    authentication-scheme hwtacacs
    authentication-mode hwtacacs local

    authorization-scheme hwtacacs
    authorization-mode hwtacacs local

    accounting-scheme hwtacacs
    accounting-mode hwtacacs
    accounting realtime 3
    accounting start-fail online

    recording-scheme hwtacacs
    recording-mode hwtacacs TAC-AAA
    cmd recording-scheme hwtacacs

    Authentication, Accounting & Authorization schemes and TACACS Server template are
    applied to the myadmin domain. Note that above Recording scheme is mapped with
    tacacs template.

    domain myadmin
    authentication-scheme hwtacacs
    accounting-scheme hwtacacs
    authorization-scheme hwtacacs
    hwtacacs-server TAC-AAA

    You might also like