FAQ-Which Versions of the MA5200G Support that Local Authorization Takes Precedence of HWTACACS Authorization

Publication Date:  2012-07-27 Views:  77 Downloads:  0
Issue Description

 Q:
Which versions of the MA5200G support that local authorization takes precedence of HWTACACS authorization? 

 

Alarm Information

 Null 

 
 

 

Handling Process
 A:
MA5200G V200R003 versions: Version 3.30-23xx does not support this function.
MA5200G V300R003C01 versions: Versions later than V300R003C01B090 support this function.
The configurations are as follows:
hwtacacs-server template nmgnoc
hwtacacs-server authentication 221.74.1.2*
hwtacacs-server authorization 221.74.1.2*
hwtacacs-server accounting 221.74.1.2*
hwtacacs-server source-ip 219.148.134.3*
hwtacacs-server shared-key huawei
undo hwtacacs-server user-name domain-included
aaa
authentication-scheme nmgnoc
authentication-mode local hwtacacs
#
authorization-scheme nmgnoc
authorization-mode local hwtacacs
#
accounting-scheme nmgnoc
accounting-mode hwtacacs
accounting start-fail online
#
domain default
authentication-scheme nmgnoc
authorization-scheme nmgnoc
accounting-scheme nmgnoc
hwtacacs-server nmgnoc
#
recording-scheme nmgnoc
recording-mode hwtacacs nmgnoc
#
system recording-scheme nmgnoc
outbound recording-scheme nmgnoc
cmd recording-scheme nmgnoc
user-interface vty 0 4
authentication-mode aaa 

 
Root Cause
 Null 

 
Suggestions
 Null 

 

END