Академический Документы
Профессиональный Документы
Культура Документы
age 2 Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved.
Objectives
Upon completion of this section, you will be able to:
Describe the schemes of the AAA security architecture.
Successfully configure Authentication and Authorization schemes.
age 3 Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved.
AAA Application
Huawei
domain NAS
Destination
Network
age 4 Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved.
Authentication
Server A
Destination RTA
Server A
Identify NAS
Host A
Server B
Username Password
Host A Huawei123
User access is managed based
Host X
on anPass123
authentication scheme.
… …
age 5 Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved.
Authorization
Server A
Device Group:Private
RTA
NAS
Host A
Group:Staff
Server B
Device Group:Public
Radius / HWTACACS
age 6 Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved.
Accounting
Server A
RTA
NAS
Host A
Server B
Radius / HWTACACS
age 7 Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved.
AAA Domains
Server A
@partner
Authenticator
Destination
Network
@huawei
Server B
age 8 Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved.
AAA Local Configuration
RTA
Host A Server A
[RTA]aaa
[RTA-aaa]local-user huawei password cipher hello123
[RTA-aaa]authentication-scheme auth1
[RTA-aaa-authen-auth1]authentication-mode local
[RTA-aaa-authen-auth1]quit
[RTA-aaa] authorization-scheme auth2
Authentication and authorization can be applied on the AR2200E.
[RTA-aaa-author-auth2]authorization-mode local
[RTA-aaa-author-auth2]quit
[RTA-aaa]domain huawei
[RTA-aaa-domain-huawei]authentication-scheme auth1
[RTA-aaa-domain-huawei]authorization-scheme auth2
age 9 Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved.
AAA Local Configuration Verification
age 10 Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved.
Summary
Which two AAA schemes are supported when configuring VRP to support the l
ocal mode?
If no domain is defined for users, what action is taken?
age 11 Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved.
Thank You
www.huawei.com