Chapter15SystemSecurityConguration
Figure15-2SSHLoginWindow
Note:
Thehostnameisthein-band/out-of-bandNMIPaddressoftheZXA10C300.
15.2ConguringTACACS+
TACACS+ensuresdatasafetyoftheZXA10C300byimplementingsafetyauthentication
andauthorizationforremotesubscriberswhoaccesstheZXA10C300.
Context
TACACS+supportstwologinmodes:
lTelnet
lSSH
Steps
1.Conguretelnetuserauthenticationtype.
ZXAN(config)#user-authentication-typeaaa
2.Conguretelnetuserauthorizationtype.
ZXAN(config)#user-authorization-typeaaa
3.CongureSSHserverauthenticationmode.
ZXAN(config)#sshserverauthenticationmodeaaa
4.EnableTACACS+.
ZXAN(config)#tacacsenable
5.CongureTACACS+server.
15-3
SJ-20130520164529-007|2013-06-30(R1.0)ZTEProprietaryandCondential