Zte ZXA10 C300 - 15.3 Configuring RADIUS

ZXA10C300CongurationManual(CLI)
lIn-bandNMmode(TheZXA10C300isconnectedtotheTACACS+serverthrough
thein-bandNMchannel.)
ZXAN(config)#tacacs-serverhost1.2.2.3
lOut-of-bandNMmode(TheZXA10C300isconnectedtotheTACACS+server
throughtheout-of-bandNMchannel.)
ZXAN(config)#tacacs-serverhostvrfmng1.2.2.3
6.CongureTACACS+servergroup.
lIn-bandNMmode
ZXAN(config)#aaagroup-servertacacs+zte
ZXAN(config-sg)#server1.2.2.3
ZXAN(config-sg)#exit
lOut-bandNMmode
ZXAN(config)#aaagroup-servertacacs+zte
ZXAN(config-sg)#servervrfmng1.2.2.3
ZXAN(config-sg)#exit
7.Conguretheauthorization,authentication,andaccountinggroup.
ZXAN(config)#aaaauthenticationlogindefaultgroupzte
ZXAN(config)#aaaauthorizationexecdefaultgroupzte
ZXAN(config)#aaaaccountingcommands10defaultstop-onlygroupzte
–EndofSteps–
15.3ConguringRADIUS
RADIUSensuresdatasafetyoftheZXA10C300byimplementingsafetyauthentication
andauthorizationforremoteuserswhoaccesstheZXA10C300.
Context
RADIUSsupportstwologinmodes:
lTelnet
lSSH
Steps
1.Conguretelnetuserauthenticationtype.
ZXAN(config)#user-authentication-typeaaa
2.Conguretelnetuserauthorizationtype.
ZXAN(config)#user-authorization-typeaaa
3.CongureSSHserverauthenticationmode.
ZXAN(config)#sshserverauthenticationmodeaaa
4.ConguretheRADIUSservergroup.
15-4
SJ-20130520164529-007|2013-06-30(R1.0)ZTEProprietaryandCondential