文章目錄
- 組網需求
- 組網拓撲
- 實驗步驟
- 測試結果
- 配置文件
組網需求
為組網安全，經常會使用AAA技術，本次以CE12800交換機+Window為例，實現AAA本地認證登錄
組網拓撲
實驗步驟
- 配置接口IP，連通終端
- 進入AAA視圖
- 配置用戶名密碼
- 配置賬戶權限
- 配置登入方式
- 進入vty視圖
- 配置認證模式AAA
測試結果
查看用戶在線情況
[HUAWEI]display aaa offline-record
---------------------------------------------------------------------------
Offline record switch : Enable
---------------------------------------------------------------------------
User name : luochen
Domain name : default_admin
User access type : Telnet
User IP address : 1.1.1.2
User ID : 4
User authen state : Success
User author state : Success
User login time : 2025-06-01 10:15:32
User offline time : 2025-06-01 10:17:06
User offline reason : Client disconnectUser name : luochen
Domain name : default_admin
User access type : Telnet
User IP address : 1.1.1.2
User ID : 3
User authen state : Success
User author state : Success
User login time : 2025-06-01 10:14:03
User offline time : 2025-06-01 10:14:26
User offline reason : Client disconnect
---------------------------------------------------------------------------
Total 2, 2 printed
查看domain域信息
- default_admin：管理用戶的缺省域
- default：普通用戶的缺省域
[HUAWEI]display aaa domain default_admin
--------------------------------------------------------------------------------
Domain-name : default_admin
Domain-state : Active
Authentication-scheme-name : default
Authorization-scheme-name : default
Accounting-scheme-name : default
User-access-limit : 283648
Online-number : 0
AdminUser-priority : -
HWTACACS-server-template : -
RADIUS-server-group : -
--------------------------------------------------------------------------------
[HUAWEI]display aaa domain default
--------------------------------------------------------------------------------
Domain-name : default
Domain-state : Active
Authentication-scheme-name : default
Authorization-scheme-name : default
Accounting-scheme-name : default
User-access-limit : 283648
Online-number : 0
AdminUser-priority : -
HWTACACS-server-template : -
RADIUS-server-group : -
--------------------------------------------------------------------------------
配置文件
認證方案+domain域均為默認配置
#
aaalocal-user luochen password irreversible-cipher Huawei@123local-user luochen service-type telnetlocal-user luochen level 3
#
interface GE1/0/0undo portswitchundo shutdownip address 1.1.1.1 255.255.255.0
#
user-interface vty 0 4authentication-mode aaa
#
