Configuraiton ssh to login device via hwtacacs authentication

Torrent · Created Oct 12, 2018 06:43:36

At first, I want to thank you very much, it is a good example to all of us. we meet this issue in daily work but I do not know how to deal with.

I am very interested for this post, which is very helpful to our daily troubleshooting. I always have similar problems in my daily work, but I do not know how to deal with them. Now I have a clear idea. Thank you very much for your sharing. Hope you can update continue like this This post was last edited by Torrent at 2018-10-22 06:08.

Barret · Created Oct 12, 2018 10:48:12

This case is a good example of Configuring ssh to login device via hwtacacs authentication if you add more detail description about this example and add the description of configuration steps . And if want to know the configuration of tacacs server, you can refer to my case. [Q&A] NE40E TACACS+ server can't login https://forum.huawei.com/enterprise/en/forum.php?mod=viewthread&tid=452157

No.9527 · Created Oct 15, 2018 00:56:36

Users are HWTACACS authenticated and the HWTACACS server template is configured.
Users can run this command to change the passwords only when the user names and passwords saved on the HWTACACS do not expire. When a user whose password has expired logs in to the device, the HWTACACS server does not allow the user to change the password and displays a message indicating that the authentication fails.
The system wait period is 30 seconds. If the TACACS server does not receive the user name, new password, or confirmed password from the user within such a period, it terminates the password change process.
Users can also press Ctrl+C to cancel password change.
HWTACACS users who pass AAA authentication can use the hwtacacs-user change-password hwtacacs-server command to change the passwords before the passwords expire. If a user needs to run this command to change the passwords of other users, the user must have the system rights.

This post was last edited by No.9527 at 2018-10-31 06:36.

littlestone · Created Oct 15, 2018 06:33:12

This case is a good example of Configuring ssh to login device via hwtacacs authentication

Configuraiton ssh to login device via hwtacacs authentication-2777717-1

Mark.hu · Created Oct 15, 2018 07:32:03

The key step in configuring the HWTACACS server template is to specify the IP address and port number of the server and the HWTACACS shared key. For other steps, you can configure the HWTACACS user name format and traffic unit to be modified

The HWTACACS user name and the HWTACACS shared key configured on the HWTACACS server template must be the same as those configured on the HWTACACS server.

This post was last edited by Mark.hu at 2018-10-31 07:04.

yjhd · Created Oct 15, 2018 07:32:43

i think ssh is used on many siutuation, i can learn it from your sharing, thanks This post was last edited by yjhd at 2018-10-31 09:11.

GongXiaochuan · Created Oct 15, 2018 08:41:43

good to know steps for configuration

This post was last edited by GongXiaochuan at 2018-10-30 04:35.

lizhi94 · Created Oct 15, 2018 08:57:50

How useful the post is！:)

lizhi94 · Created Oct 16, 2018 03:57:02

This is exactly what I was looking for. I have been stuck for a long time on this problem. you gave me a very good idea ,I very much appreciate it.

Please keep on post and share more cases for all of us

Enterprise

Consumer

Corporate

Carriers

Configuraiton ssh to login device via hwtacacs authentication

Third Party’s Trade Secret