NE40E-X3 upgrade problem.

Finn92 · Created Oct 17, 2018 03:40:19

hello sir
when you input the command , does it show below alarm ?
[~HUAWEI-hwtacacs-tac] undo hwtacas-server user-name domain-included
Error: Configuring devices in a RADIUS server group or TACACS server template bound to the admin domain to send user names without domain names brings security risks. Changing the mode to using the original user name is recommended.

if yes, the root casue is
In V800R008C00 and later versions, an HWTACACS template having the undo hwtacacs-server user-name domain-included configuration cannot be bound to the default admin domain or a domain having the adminuser-priority level configuration (configuration restoration is not affected).

solution :
Run the hwtacacs-server user-name original command to override the undo hwtacacs-server user-name domain-included configuration.
and remember commit configuration .

a84042067 · Created May 20, 2018 08:59:10

Please let me know the below information:
1. in the current situation with new software without this command (undo hwtacacs-server user-name domain-included) can you connect to the server with only username "without domain name" or not.
2. If you created another Domain can you add this command (undo hwtacacs-server user-name domain-included) or still the same issue

Mysterious.color · Created May 20, 2018 10:10:59

i would like to see the solution
why not contacting local office?

Fernandoizsa · Created Aug 27, 2018 21:16:43

i suggest delete the command in the RADIUS server template view or in the HWTACACS Server template view. Double check that you are using the correct template.

If you can please share to us the HWTACACS configuration.

Finn92 · Created Oct 17, 2018 03:40:19

hello sir
when you input the command , does it show below alarm ?
[~HUAWEI-hwtacacs-tac] undo hwtacas-server user-name domain-included
Error: Configuring devices in a RADIUS server group or TACACS server template bound to the admin domain to send user names without domain names brings security risks. Changing the mode to using the original user name is recommended.

if yes, the root casue is
In V800R008C00 and later versions, an HWTACACS template having the undo hwtacacs-server user-name domain-included configuration cannot be bound to the default admin domain or a domain having the adminuser-priority level configuration (configuration restoration is not affected).

solution :
Run the hwtacacs-server user-name original command to override the undo hwtacacs-server user-name domain-included configuration.
and remember commit configuration .

NE40E-X3 upgrade problem.

Recommended answer

Third Party’s Trade Secret

My Followers

Enterprise

Consumer

Corporate

Carriers

NE40E-X3 upgrade problem.

Recommended answer

Third Party’s Trade Secret

My Followers