aaa伺服器地址配置

❶ H3C S3600交換機AAA認證配置

1.對於交換機，最好console不要配置認證，萬一出現問題（如人為設置錯誤等），你console無法進去，最好配置個本地用戶。
2.配置tacacs就可以了。沒必要配置radius(radius還不能對命令進行鑒權)，tacacs，完全可以對用戶、等級（exec）、命令（command）進行授權。
給個配置給你參考（華為），我這配置，對於console口是沒有去aaa伺服器的。

domain mydepart
scheme hwtacacs-scheme mydepart local
vlan-assignment-mode integer
access-limit disable
state active
idle-cut disable
self-service-url disable

hwtacacs scheme mydepart
primary authentication 192.168.1.2
secondary authentication 192.168.1.3
primary authorization 192.168.1.2
secondary authorization 192.168.1.3
primary accounting 192.168.1.2
secondary accounting 192.168.1.3
key authentication mykey
key authorization mykey
key accounting mykey
user-name-format without-domain

local-user myuser

#
super password level 3 cipher sdfsdfgsdfs
#
hwtacacs nas-ip 192.168.1.1

user-interface vty 0 4
acl 2000 inbound
authentication-mode scheme command-authorization
user privilege level 3
idle-timeout 5 0
protocol inbound telnet

user-interface con 0
authentication-mode password
set authentication password cipher sdfsdfsdfwer
idle-timeout 5 0