【原创】华为交换机HWTACACS认证配置

设置VTY，允许telnet登录

user-interface vty 0 4
 authentication-mode aaa
 user privilege level 15
 protocol inbound telnet

设置TACACS服务器

hwtacacs-server template hwtacacs-server1
 hwtacacs-server authentication 192.168.250.6
 hwtacacs-server authorization 192.168.250.6
 hwtacacs-server accounting 192.168.250.6
 hwtacacs-server shared-key cipher [email protected]
 quit

认证

aaa
 authentication-scheme authentication-hwtacacs
  authentication-mode hwtacacs local
  authentication-super hwtacacs super
  quit

授权

aaa
 authorization-scheme authorization-hwtacacs
  authorization-mode hwtacacs local
  quit

计费

aaa
 accounting-scheme accounting-hwtacacs
  accounting-mode hwtacacs
  accounting realtime 3
  accounting start-fail online
  quit

设置认证域

aaa
 domain linux-hwtacacs
  authentication-scheme authentication-hwtacacs
  accounting-scheme accounting-hwtacacs
  authorization-scheme authorization-hwtacacs
  hwtacacs-server hwtacacs-server1
 quit
 quit

启用认证域

domain linux-hwtacacs admin

再添加一个本地用户，以防TACACS服务器掉线

aaa
local-user admin password irreversible-cipher [email protected]
 local-user admin privilege level 15
 local-user admin service-type telnet terminal http

查看域信息

display domain name linux-hwtacacs

调试

return
terminal monitor
terminal debugging
debugging hwtacacs all