57[Switch-hwtacacs-hwtac] user-name-format without-domain[Switch-hwtacacs-hwtac] quitConfigure the AAA methods for the domain.[Switch] domain bbb[Switch-isp-bbb] authentication login hwtacacs-scheme hwtac[Switch-isp-bbb] authorization login hwtacacs-scheme hwtac[Switch-isp-bbb] accounting login hwtacacs-scheme hwtac[Switch-isp-bbb] quitYou can achieve the same purpose by setting AAA methods for all types of users.[Switch] domain bbb[Switch-isp-bbb] authentication default hwtacacs-scheme hwtac[Switch-isp-bbb] authorization default hwtacacs-scheme hwtac[Switch-isp-bbb] accounting default hwtacacs-scheme hwtacWhen telneting into the switch, a user enters username userid@bbb for authentication usingdomain bbb.AAA for telnet users by separate serversNetwork requirementsConfigure the switch to provide local authentication, HWTACACS authorization, and RADIUSaccounting services to Telnet users. The user name and the password for Telnet users are bothhello.• The HWTACACS server is used for authorization. Its IP address is 10.1.1.2. On the switch, setthe shared keys for packets exchanged with the HWTACACS server to expert. Configurethe switch to remove the domain name from a user name before sending the user name to theHWTACACS server.• The RADIUS server is used for accounting. Its IP address is 10.1.1.1. On the switch, set theshared keys for packets exchanged with the RADIUS server to expert.Configuration of separate AAA for other types of users is similar to that given in this example. The onlydifference lies in the access type.
