Scribd
Upload
241 views1 page

Tacacs Huawei

The document configures TACACS+ authentication, authorization, and accounting for the domain "myadmin" on a Cisco device. It defines a TACACS+ server template using two backup servers, configures AAA schemes to use TACACS+, and applies the schemes and server template to the domain. It also configures command recording on the TACACS+ servers.

Uploaded by

roccaeder
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd
241 views1 page

Tacacs Huawei

The document configures TACACS+ authentication, authorization, and accounting for the domain "myadmin" on a Cisco device. It defines a TACACS+ server template using two backup servers, configures AAA schemes to use TACACS+, and applies the schemes and server template to the domain. It also configures command recording on the TACACS+ servers.

Uploaded by

roccaeder
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd
You are on page 1/ 1

Set domain name myadmin

domain myadmin admin


#

Configure TACACS+ server template. Shared key is same as configured on ACS

#
hwtacacs-server template TAC-AAA
hwtacacs-server authentication 192.168.3.20
hwtacacs-server authentication 192.168.4.20 secondary
hwtacacs-server authorization 192.168.3.20
hwtacacs-server authorization 192.168.4.20 secondary
hwtacacs-server accounting 192.168.3.20
hwtacacs-server accounting 192.168.4.20 secondary
hwtacacs-server source-ip 192.168.150.20
hwtacacs-server shared-key cipher huawei
#

Configure AAA schemes. Also configure recording scheme for commands accounting on
ACS server.

#
aaa
authentication-scheme hwtacacs
authentication-mode hwtacacs local

authorization-scheme hwtacacs
authorization-mode hwtacacs local

accounting-scheme hwtacacs
accounting-mode hwtacacs
accounting realtime 3
accounting start-fail online

recording-scheme hwtacacs
recording-mode hwtacacs TAC-AAA
cmd recording-scheme hwtacacs

Authentication, Accounting & Authorization schemes and TACACS Server template are
applied to the myadmin domain. Note that above Recording scheme is mapped with
tacacs template.

domain myadmin
authentication-scheme hwtacacs
accounting-scheme hwtacacs
authorization-scheme hwtacacs
hwtacacs-server TAC-AAA

You might also like