Operation Manual – AAA-RADIUS-HWTACACSH3C S3610&S5510 Series Ethernet SwitchesChapter 1 AAA/RADIUS/HWTACACSConfiguration1-43II. Network diagramFigure 1-8 Configure AAA by separate servers for Telnet usersIII. Configuration procedure# Configure the IP addresses of various interfaces (omitted).# Enable the Telnet server on the switch. system-view[Switch] telnet server enable# Configure the switch to use AAA for Telnet users.[Switch] user-interface vty 0 4[Switch-ui-vty0-4] authentication-mode scheme[Switch-ui-vty0-4] quit# Configure the HWTACACS scheme.[Switch] hwtacacs scheme hwtac[Switch-hwtacacs-hwtac] primary authorization 10.1.1.2 49[Switch-hwtacacs-hwtac] key authorization expert[Switch-hwtacacs-hwtac] user-name-format without-domain[Switch-hwtacacs-hwtac] quit# Configure the RADIUS scheme.[Switch] radius scheme rd[Switch-radius-rd] primary accounting 10.1.1.1 1813[Switch-radius-rd] key accounting expert[Switch-radius-rd] server-type extended[Switch-radius-rd] user-name-format without-domain[Switch-radius-rd] quit# Create local user named telnet.[Switch] local-user telnet[Switch-luser-telnet] service-type telnet[Switch-luser-telnet] password simple telnet
