HP Switch

HP Switch and Tacacs

HP Switch and Tacacs configuration. Tested on HP A5120/ H3C S5120.

hwtacacs scheme tacacs+
primary authentication (ip-address of 1st tacacs server)
secondary authentication (ip-address of 2nd tacacs server)
primary authorization (ip-address of 1st tacacs server)
secondary authorization (ip-address of 2nd tacacs server)
primary accounting (ip-address of 1st tacacs server)
secondary accounting (ip-address of 2nd tacacs server)
nas-ip (ip-address of the switch)
key authentication cipher (tacacskey)
key authorization cipher (tacacskey)
key accounting cipher (tacacskey)
user-name-format without-domain

domain aaa
authentication login hwtacacs-scheme tacacs+ local
authorization login hwtacacs-scheme tacacs+ local
accounting login hwtacacs-scheme tacacs+ local
authorization command hwtacacs-scheme tacacs+ local
accounting command hwtacacs-scheme tacacs+
access-limit disable
state active
idle-cut disable
self-service-url disable

domain default enable aaa

user-interface vty 0 15
authentication-mode scheme
command authorization
command accounting