ciscoACS认证与H3C华为设备对接使用.rar

SwitchA与ACS的对接参数 hwtacacs-server template hw hwtacacs-server authentication 10.240.1.254 hwtacacs-server authorization 10.240.1.254 hwtacacs-server accounting 10.240.1.254 hwtacacs-server shared-key cipher pwd@autel#8 undo hwtacacs-server user-name domain-included 创建认证方案 aaa authentication-scheme hw authentication-mode hwtacacs local #//配置认证方式为HWTACACS，并配置本地认证方式作为备份 创建授权方案hw authorization-scheme hw authorization-mode hwtacacs local authorization-cmd 0 hwtacacs 创建计费方案wh accounting-scheme hw accounting-mode hwtacacs 创建管理员的认证域hw aaa domain hw authentication-scheme hw accounting-scheme hw authorization-scheme hw hwtacacs-server hw domain hw admin 创建RADIUS服务器模板authentication radius-server template authentication radius-server authentication 10.240.1.254 1812 radius-server accounting 10.240.1.254 1813 radius-server shared-key cipher pwd@autel#8 undo radius-server user-name domain-included calling-station-id mac-format hyphen-split mode2 uppercase radius-attribute set Service-Type 10 auth-type mac 配置RADIUS授权服务器 radius-server authorization 10.240.1.254 shared-key cipher pwd@autel#8 创建认证方案auth aaa authentication-scheme auth authentication-mode radius 创建计费方案acco aaa accounting-scheme acco accounting-mode radius accounting realtime 3 创建认证域domain aaa domain domain authentication-scheme auth accounting-scheme acco radius-server authentication 转换成传统模式 undo authentication unified-mode 开启mac-authen认证 mac-authen mac-authen username macaddress format with-hyphen normal mac-authen domain domain interface GigabitEthernet0/0/1 port link-type hybrid #设置hybrid模式才能从ACS认证服务器获取地址。 mac-authen