配置AAA 认证 (参考主中心的S7506E配置)
hwtacacs scheme acs
primary authentication 101.192.1.52 //配置认证服务器地址
secondary authentication 102.192.1.33
primary authorization 101.192.1.52 //配置授权服务器地址
secondary authorization 102.192.1.33
primary accounting 101.192.1.52 //配置计费服务器地址
secondary accounting 102.192.1.33
nas-ip 137.255.249.252 //LoopBack0地址
key authentication cipher xxxxx //此认证密码问用户
key authorization cipher xxxxx //此授权认证密码问用户
key accounting cipher xxxxx //此计费密码问用户
user-name-format without-domain
#
domain acs
authentication default hwtacacs-scheme acs local
authorization default hwtacacs-scheme acs local
accounting default hwtacacs-scheme acs local
access-limit disable
state active
idle-cut disable
self-service-url disable
domain default enable acs
转载于:https://blog.51cto.com/2526575/1556748