2-30z Enable the local RADIUS server function, set the IP address and shared key for the networkaccess server to 127.0.0.1 and aabbcc, respectively.z Configure local users.HWTACACS Authentication and Authorization of Telnet UsersNetwork requirementsYou are required to configure the switch so that the Telnet users logging into the switch areauthenticated and authorized by the TACACS server.A TACACS server with IP address 10.110.91.164 is connected to the switch. This server will be used asthe authentication and authorization server. On the switch, set both authentication and authorizationshared keys that are used to exchange messages with the TACACS server to aabbcc. Configure theswitch to strip domain names off usernames before sending usernames to the TACACS server.Configure the shared key to aabbcc on the TACACS server for exchanging messages with the switch.Network diagramFigure 2-3 Remote HWTACACS authentication and authorization of Telnet usersInternetTelnet userAuthentication server10.110.91.164/16Configuration procedure# Add a Telnet user.(Omitted here)# Configure a HWTACACS scheme. system-view[Sysname] hwtacacs scheme hwtac[Sysname-hwtacacs-hwtac] primary authentication 10.110.91.164 49[Sysname-hwtacacs-hwtac] primary authorization 10.110.91.164 49[Sysname-hwtacacs-hwtac] key authentication aabbcc[Sysname-hwtacacs-hwtac] key authorization aabbcc[Sysname-hwtacacs-hwtac] user-name-format without-domain[Sysname-hwtacacs-hwtac] quit# Configure the domain name of the HWTACACS scheme to hwtac.[Sysname] domain hwtacacs[Sysname-isp-hwtacacs] scheme hwtacacs-scheme hwtac
