Huawei Quidway S5600 Series - Aaa Configuration

Operation Manual – AAA & RADIUS & HWTACACS & EAD
Quidway S5600 Series Ethernet Switches-Release 1510
Chapter 1 AAA & RADIUS & HWTACACS
Configuration
Huawei Technologies Proprietary
1-13
Operation Description Related section
Configure the user
re-authentication upon
device restart function
Optional
Section 1.4.12
“Configuring the User
Re-Authentication
upon Device Restart
Function
”
Create a HWTACAS
scheme
Required
Section
1.5.1
“Creating a
HWTACAS Scheme
”
Configure HWTACACS
authentication servers
Required
Section
1.5.2
“Configuring
HWTACACS
Authentication
Servers
”
Configure HWTACACS
authorization servers
Required
Section
1.5.3
“Configuring
HWTACACS
Authorization
Servers
”
Configure HWTACACS
accounting servers
Optional
Section
1.5.4
“Configuring
HWTACACS
Accounting Servers
”
Configure shared keys for
RADIUS packets
Optional
Section
1.5.5
“Configuring Shared
Keys for RADIUS
Packets
”
Configure the attributes for
data to be sent to TACACS
servers
Optional
Section 1.5.6
“Configuring the
Attributes for Data to
be Sent to TACACS
Servers
”
HWTACACS
configuration
Configure the timers of
TACACS servers
Optional
Section
1.5.7
“Configuring the
Timers of TACACS
Servers
”
1.3 AAA Configuration
The goal of AAA configuration is to protect network devices against unauthorized
access and at the same time provide network access services to authorized users. If
you need to use ISP domains to implement AAA management on access users, you
need to configure the ISP domains.