Prerequisites
l The route from the MA5600T/MA5603T/MA5608T to the HWTACACS server must be
configured.
l The management user information (user name@domain and password) must be configured
on the HWTACACS server.
Service Requirements
l The HWTACACS server performs authentication for management user of domain isp1.
l The user logs in to the server carrying the domain name.
l The HWTACACS server with the IP address 10.10.66.66 functions as the primary server
for authentication.
l The HWTACACS server with the IP address 10.10.66.67 functions as the secondary server
for authentication.
l Other parameters adopt the default settings.
Networking
Figure 2-4 shows an example network of HWTACACS authentication.
Figure 2-4 Example network of HWTACACS authentication
Procedure
Step 1 Configure the authentication scheme.
Configure authentication scheme named login-auth (users are authenticated through
HWTACACS).
SmartAX MA5600T/MA5603T/MA5608T Multi-service
Access Module
Commissioning and Configuration Guide
2 Basic Configurations
Issue 01 (2014-04-30) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
248