HPE FlexNetwork MSR Series Comware 5 Security Configuration Guide

63
On the HWTACACS server, set the shared keys for secure communication with the router to
expert, add an account for the PPP user, and specify the password. (Details not shown.)
2. Configure the router:
# Create HWTACACS scheme hwtac.
<Router> system-view
[Router] hwtacacs scheme hwtac
# Specify the primary authentication server.
[Router-hwtacacs-hwtac] primary authentication 10.1.1.1 49
# Specify the primary authorization server.
[Router-hwtacacs-hwtac] primary authorization 10.1.1.1 49
# Specify the primary accounting server.
[Router-hwtacacs-hwtac] primary accounting 10.1.1.1 49
# Set the shared keys for secure HWTACACS communication to expert.
[Router-hwtacacs-hwtac] key authentication simple expert
[Router-hwtacacs-hwtac] key authorization simple expert
[Router-hwtacacs-hwtac] key accounting simple expert
# Remove domain names from the usernames sent to the HWTACACS server.
[Router-hwtacacs-hwtac] user-name-format without-domain
[Router-hwtacacs-hwtac] quit
# Configure AAA methods for the domain.
[Router] domain bbb
[Router-isp-bbb] authentication ppp hwtacacs-scheme hwtac
[Router-isp-bbb] authorization ppp hwtacacs-scheme hwtac
[Router-isp-bbb] accounting ppp hwtacacs-scheme hwtac
[Router-isp-bbb] ip pool 1 200.1.1.1 200.1.1.99
[Router-isp-bbb] quit
# Configure the serial interface.
[Router] interface serial 2/0
[Router-Serial2/0] link-protocol ppp
[Router-Serial2/0] ppp authentication-mode pap domain bbb
[Router-Serial2/0] ip address 2.2.2.1 255.255.255.0
[Router-Serial2/0] remote address pool 1
[Router-Serial2/0] quit
# Configure the Ethernet interface.
[Router] interface ethernet 1/1
[Router-Ethernet1/1] ip address 10.1.1.2 255.255.255.0
Verifying the configuration
Initiate a PPP connection from the PPP client, and enter the correct username and password. You
pass authentication and the PPP client can use the IP address assigned by the router to access the
network. You can use the display connection command on the router to view information about the
connection.
Level switching authentication for Telnet users by a RADIUS
server
Network requirements
As shown in Figure 20, configure the router to:

HPE FlexNetwork MSR Series Specifications

General

Brand	HPE
Model	FlexNetwork MSR Series
Category	Network Router
Language	English