Zte ZXA10 C300 - 15.2 Configuring TACACS+

To Next Page

To Previous Page

Chapter15SystemSecurityConguration

Figure15-2SSHLoginWindow

Note:

Thehostnameisthein-band/out-of-bandNMIPaddressoftheZXA10C300.

15.2ConguringTACACS+

TACACS+ensuresdatasafetyoftheZXA10C300byimplementingsafetyauthentication

andauthorizationforremotesubscriberswhoaccesstheZXA10C300.

Context

TACACS+supportstwologinmodes:

lTelnet

lSSH

Steps

1.Conguretelnetuserauthenticationtype.

ZXAN(config)#user-authentication-typeaaa

2.Conguretelnetuserauthorizationtype.

ZXAN(config)#user-authorization-typeaaa

3.CongureSSHserverauthenticationmode.

ZXAN(config)#sshserverauthenticationmodeaaa

4.EnableTACACS+.

ZXAN(config)#tacacsenable

5.CongureTACACS+server.

15-3

SJ-20130520164529-007|2013-06-30(R1.0)ZTEProprietaryandCondential

Main Page

Default Chapter3
- Table of Contents3
- About this Manual9
Chapter 1 Basic Configuration11
- Management Methods11
- NM Configuration15
- Physical Configuration18
- System Configuration26
- User Management30
Chapter 2 GPON/XG-PON Service Configuration35
- Figure 2-1 GPON/XG-PON Service Networking Diagram36
- Configuring the GPON ONU Type Profile37
- Table 2-1 Configuration Data of the GPON ONU Type37
- Authenticating the GPON ONU38
- Table 2-2 Configuration Data for GPON ONU Authentication39
- Table 2-3 Descriptions of ONU Phase States39
- Configuring the T-CONT Bandwidth Profile40
- Table 2-4 Parameters of the Default T-CONT Profile41
- Table 2-5 Configuration Data for the T-CONT Profile41
- Configuring the GPON ONU IP Profile43
- Configuring the GPON ONU VLAN Profile43
- Table 2-6 Configuration Data of the GPON ONU IP Profile43
- Configuring the Voip Access Code Profile44
- Table 2-7 Configuration Data of the GPON VLAN Profile44
- Table 2-8 Configuration Data of the Voip Access Code Profile44
- Configuring the Voip Service Application Profile45
- Table 2-9 Configuration Data of the Voip Service Application Profile45
- Configuring the Dial Plan47
- Configuring the GPON SIP Profile47
- Table 2-10 Configuration Data of the GPON SIP Profile47
- Configuring the GPON MGC Profile48
- Table 2-11 Configuration Data of the GPON MGC Profile49
- Configuring the GPON Broadband Service50
- Table 2-12 Configuration Data of the GPON Broadband Service51
- Figure 2-2 Configuration Flowchart of the GPON Broadband Service52
- Configuring the GPON Multicast Service53
- Figure 2-3 Configuration Flowchart of the GPON Multicast Service55
- Configuring the GPON Voice Service (SIP)57
- Table 2-14 Configuration Data of the GPON Voice Service57
- Figure 2-4 Configuration Flowchart of the GPON Voice Service58
- Configuring the GPON Voice Service (H.248)59
- Table 2-15 Configuration Data of the GPON Voice Service60
- Figure 2-5 Configuration Flowchart of the GPON Voice Service61
- Table 3-1 TDM Interface Cards63
- Table 3-2 Value Range of CTLA Interface Parameter63
- Table 3-3 Configuration Data of the GPON CES Service64
Chapter 3 CES Service Configuration65
- Figure 3-1 Configuration Flowchart of the GPON CES Service65
Chapter 4 P2P Service Configuration69
- Configuring the P2P Service69
- Table 4-1 P2P Service Configuration Data70
Chapter 5 VLAN Configuration73
- Configuring the Uplink Port VLAN73
- Table 5-1 VLAN Specifications73
- Configuring the Service Port VLAN74
- Configuring the Cross-Connection VLAN75
Chapter 6 IPTV Configuration77
- Configuring the IGMP MVLAN78
- Table 6-1 Configuration Data of the IGMP MVLAN78
- Configuring the MLD MVLAN81
- Table 6-2 Configuration Data of the MLD MVLAN81
- Configuring the IPTV Package83
- Table 6-3 Configuration Data of the IPTV Package83
- Configuring the Port IPTV Right84
Chapter 7 Qos Configuration87
- Ethernet Interface Qos Configuration87
- OLT Interface Qos Configuration92
- ONU Interface Qos Configuration94
Chapter 8 ACL Configuration101
- Configuring a Standard ACL102
- Table 8-1 Configuration Data of the Standard ACL102
- Configuring an Extended ACL103
- Table 8-2 Configuration Data of the Extended ACL103
- Configuring a Layer-2 ACL104
- Table 8-3 Configuration Data of the Layer-2 ACL105
- Configuring a Hybrid ACL106
- Table 8-4 Configuration Data of the Hybrid ACL106
- Configuring an Ipv6 Hybrid ACL107
- Table 8-5 Configuration Data of the Ipv6 Hybrid ACL108
Chapter 9 NTP Configuration111
- Configuring NTP111
Chapter 10 STP Configuration115
Chapter 11 DHCP Configuration117
- Configuring DHCP Snooping117
- Configuring DHCP Server118
- Table 11-1 Configuration Data of DHCP Snooping118
- Table 11-2 Configuration Data of DHCP Server119
- Configuring DHCP Client120
- Table 11-3 Configuration Data of DHCP Client120
Chapter 12 Uplink Protection Configuration123
- Configuring Link Aggregation123
- Configuring UAPS127
- Configuring CTLA 1+1 Protection128
- Table 13-1 PON Protection Configuration Data132
Chapter 13 PON Protection Configuration133
Chapter 14 Access Security Configuration135
- Port Identification Configuration135
- MAC Address Anti-Spoofing Configuration142
  - Configuring the User Port MAC Address Anti-Spoofing142
  - Configuring the Service Gateway MAC Anti-Spoofing143
- Configuring the ARP Anti-Spoofing144
- Configuring the Split Horizon145
- Table 14-6 Configuration Data of ARP Anti-Spoofing145
- Configuring the IP Source Guard146
- Table 14-7 Configuration Data of IP Source Guard146
- Configuring MFF147
- Configuring ARP Proxy148
Chapter 15 System Security Configuration149
- Configuring SSH149
- Figure 15-1 Quick Connect Dialog Box150
- Configuring TACACS151
- Figure 15-2 SSH Login Window151
- Configuring RADIUS152
- Configuring Management ACL153
- Configuring Control Panel Safety154
Chapter 16 MPLS Service Configuration157
- MPLS Configuration157
- VPLS Configuration179
- Configuring the VPWS203
- Figure 16-16 Configuration Flowchart of VPWS206
- PWE3 Configuration210
- PW Redundancy Configuration234
- Ethernet OAM Configuration263
  - Configuring the CCM Function263
  - Table 17-1 Configuration Data of CCM Function263
Chapter 17 OAM Configuration263
- Configuring the LBM Function265
- Table 17-2 Configuration Data of LBM Function266
- Configuring the LTM Function267
- BFD Configuration269
Chapter 18 Route Protocol Configuration279
- Configuring the Static Route279
- Configuring the OSPF Protocol279
- Configuring the BGP280
Chapter 19 Clock Configuration281
- Configuring the Synchronous Ethernet Clock281
- Table 19-1 Configuration Data of the Synchronous Ethernet Clock281
- Configuring External Input Clock283
- Configuring the External Output Clock284
- Configuring PTP Slave Clock286
- Figures289
- Glossary295

Zte ZXA10 C300 - 15.2 Configuring TACACS+

Table of Contents

Other manuals for Zte ZXA10 C300