H3C Technologies H3C SecPath F1000-E - Manual (Page 432)

3
6. After receiving the username from the user, the HWTACACS client sends to the server a
continue-authentication packet carrying the username.
7. The HWTACACS server sends back an authentication response, requesting the login password.
8. The user inputs the password.
9. After receiving the login password, the HWTACACS client sends to the HWTACACS server a
continue-authorization packet carrying the login password.
10. The HWTACACS server sends back an authorization response, indicating that the user has passed
authentication.
11. Knowing that the user is now authorized, the HWTACACS client pushes the configuration
interface of the firewall to the user.
12. The HWTACACS client sends the user accounting request packet to the HWTACACS server.
13. The HWTACACS server sends back the authorization response, indicating that the user is
authorized now.
14. Knowing that the user is now authorized, the HWTACACS client pushes the configuration
interface of the NAS to the user.
15. The HWTACACS client sends a start-accounting request to the HWTACACS server.
16. The HWTACACS server sends back an accounting response, indicating that it has received the
start-accounting request.
17. 8The user logs off.
18. The HWTACACS client sends a stop-accounting request to the HWTACACS server.
19. The HWTACACS server sends back a stop-accounting response, indicating that the
stop-accounting request has been received.
Configuring HWTACACS
Configuration Task List
NOTE:
The HWTACACS scheme configured through the Web interface is named system.
Perform the tasks in Table 2 to configure HWTACACS.
Table 2 HWTACACS configuration task list
Task Description
Creating a HWTACACS Scheme
Required
Create a HWTACACS scheme named system.
By default, no HWTACACS scheme exists.