Professional Documents
Culture Documents
age 2 Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved.
Objectives
Upon completion of this section, you will be able to:
Describe the schemes of the AAA security architecture.
Successfully configure Authentication and Authorization schemes.
age 3 Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved.
AAA Application
Huawei
domain NAS
Destination
Network
AAA Server
age 4 Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved.
Authentication
Server A
Destination RTA
Server A
Identify NAS
Host A
Server B
Username Password
Host A Huawei123
Host X Pass123
… …
age 5 Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved.
Authorization
Server A
Device Group:Private
RTA
NAS
Host A
Group:Staff
Server B
Device Group:Public
Radius / HWTACACS
age 6 Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved.
Accounting
Server A
RTA
NAS
Host A
Server B
Radius / HWTACACS
age 7 Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved.
AAA Domains
Server A
@partner
Authenticator
Destination
Network
@huawei
Server B
age 8 Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved.
AAA Local Configuration
RTA
Host A Server A
[RTA]aaa
[RTA-aaa]local-user huawei password cipher hello123
[RTA-aaa]authentication-scheme auth1
[RTA-aaa-authen-auth1]authentication-mode local
[RTA-aaa-authen-auth1]quit
[RTA-aaa] authorization-scheme auth2
[RTA-aaa-author-auth2]authorization-mode local
[RTA-aaa-author-auth2]quit
[RTA-aaa]domain huawei
[RTA-aaa-domain-huawei]authentication-scheme auth1
[RTA-aaa-domain-huawei]authorization-scheme auth2
Authentication and authorization can be applied on the AR2200E.
age 9 Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved.
AAA Local Configuration Verification
age 10 Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved.
Summary
Which two AAA schemes are supported when configuring VRP to support the
local mode?
If no domain is defined for users, what action is taken?
age 11 Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved.
Thank You
www.huawei.com