R0106-HP MSR Router Series Fundamentals Configuration Guide(V7)

33
# Delete the default user role network-operator.
[Router-luser-manage-test] undo authorization-attribute user-role network-operator
[Router-luser-manage-test] quit
# Set the local authentication password to 654321 for the user role level-3.
[Router] super password role level-3 simple 654321
[Router] quit
2. Configure the HWTACACS server:
This example uses ACSv4.0.
a. Add a user account test. (Details not shown.)
b. Access the Advanced TACACS+ Settings page.
c. Select Level 3 for the Max Privilege for any AAA Client option.
d. Select the Use separate password option, and specify enabpass as the password.
Figure 6 Configuring advanced TACACS+ settings
Verifying the configuration
1. Telnet to the router, and enter the username test@bbb and password aabbcc to access the router.
Verify that you have access to diagnostic commands.
<Router> telnet 192.168.1.70
Trying 192.168.1.70 ...