H3C S7500 Series Ethernet Switches Command Manual

Command Manual – AAA & RADIUS & HWTACACS & EAD
H3C S7500 Series Ethernet Switches
Chapter 1 AAA & RADIUS & HWTACACS
Configuration Commands
1-58
Examples
# Create an HWTACACS scheme named test1 and enter the relevant HWTACACS
scheme view.
<H3C> system-view
System View: return to User View with Ctrl+Z.
[H3C] hwtacacs scheme test1
Create a new HWTACACS-server scheme
[H3C-hwtacacs-test1]
1.3.6 key
Syntax
key { accounting | authentication | authorization } string
undo key { accounting | authentication | authorization } string
View
HWTACACS scheme view
Parameters
accounting: Specifies a shared key for the accounting server.
authentication: Specifies a shared key for the authentication server.
authorization: Specifies a shared key for the authorization server.
string: Shared key, a string containing 0 to 16 characters.
Description
Use the key command to configure a shared key for HWTACACS authentication,
authorization or accounting server.
Use the undo key command to delete the configuration.
By default, no key is set for any TACACS server.
The TACACS client (on the switch) and the TACACS server use the MD5 algorithm to
encrypt the HWTACACS packets communicated between them. They authenticate
packets by using shared keys. Either of them receives and responds to the packet sent
from the other party only when their shared keys are the same. Therefore, the shared
key set on the switch and that on the TACACS server must be the same.
If the authentication/authorization server and the accounting server are different and
the shared keys for the two servers are different, a shared key must be set for
authentication/authorization packets and accounting packets.
Related commands: display hwtacacs.