H3C Technologies H3C SecPath F1000-E - Manual (Page 32)

24
Step Command Remarks
4. Specify the scheme
authentication mode.
authentication-mode scheme
Whether local, RADIUS, or
HWTACACS authentication is
adopted depends on the
configured AAA scheme.
By default, local authentication is
adopted.
5. Enable command authorization. command authorization
Optional.
By default, command authorization
is not enabled.
Create a HWTACACS scheme,
and specify the IP address of the
authorization server and other
authorization parameters. For more
information, see Access Control
Configuration Guide.
Reference the created HWTACACS
scheme in the ISP domain. For more
information, see Access Control
Configuration Guide.
6. Enable command accounting. command accounting
Optional.
By default, command accounting is
disabled. The accounting server
does not record the commands
executed by users.
Command accounting allows the
HWTACACS server to record all
executed commands that are
supported by the device,
regardless of the command
execution result. This helps control
and monitor user operations on the
device. If command accounting is
enabled and command
authorization is not enabled, every
executed command is recorded on
the HWTACACS server. If both
command accounting and
command authorization are
enabled, only the authorized and
executed commands are recorded
on the HWTACACS server.
7. Exit to system view. quit N/A