中国电信CN2网络华为VRR设备配置模板.docVIP

中国电信CN2网络华为设备配置模板 PE设备（Ver 1.61） AAA配置模块 　　 hwtacacs-server template tacacs hwtacacs-server authentication 59.43.53.20 hwtacacs-server authentication 59.43.49.13 secondary hwtacacs-server authorization 59.43.53.20 hwtacacs-server authorization 59.43.49.13 secondary hwtacacs-server accounting 59.43.53.20 hwtacacs-server accounting 59.43.49.13 secondary hwtacacs-server source-ip 59.43.0.105 hwtacacs-server shared-key Cy1TaApORzJ0v undo hwtacacs-server user-name domain-included # aaa local-user group_noc password cipher CT_NOC local-user group_noc service-type telnet ssh local-user group_noc level 3 # authentication-scheme default authentication-mode local hwtacacs # authorization-scheme default authorization-mode local hwtacacs # accounting-scheme default accounting-mode hwtacacs accounting start-fail online accounting interim-fail max-times 3 online # domain default hwtacacs-server tacacs # recording-scheme tacacs recording-mode hwtacacs tacacs # cmd recording-scheme tacacs # command-privilege level 2 view system display current-configuration command-privilege level 2 view system display //命令无法输入 Info: Failed to process the command, please specify the command. # 设备基本信息 # sysname XZ-LS-DJ-V-1.CN2 # info-center loghost source LoopBack0 info-center loghost 59.43.49.27 facility local7 info-center loghost 59.43.53.27 facility local7 info-center logbuffer size 1024 # router id 59.43.5.105 # Quit clock timezone PRC minus 8 sys ntp-service source-interface LoopBack0 ntp-service unicast-server 59.43.49.114 ntp-service unicast-server 59.43.53.122 ntp-service unicast-server 59.43.49.122 preference # acl number 2999 description this acl is for telnet rule 10 permit source 59.43.0.0 0.0.255.255 rule 20 permit source 202.97.3.0 0.0.0.255 # user-interface maximum-vty 15 user-interface con 0 idle-timeout 30 0 user-interface aux 0