tacgui with cisco huawei and h3c

tacgui是个opensoure的tacacs+，我的情景主要是实现网络设备登录管控和命令审计。

思路：

--tacgui

1 安装tacgui

2  新建user

3 新建device

--配置设备

华为为例

template	hwtacacs-server template test  hwtacacs-server authentication 192.168.10.12 //your tacgui ip  hwtacacs-server authorization 192.168.10.12  hwtacacs-server accounting 192.168.10.12 hwtacacs-server source-ip xxx.xxx.xxx.xxx    //交换机管理地址  hwtacacs-server shared-key cipher test2test
Aaa	aaa  authentication-scheme tac1   authentication-mode hwtacacs local     authorization-scheme tac1   authorization-mode hwtacacs local   authorization-cmd 15 hwtacacs local    accounting-scheme tac1   accounting-mode hwtacacs   accounting start-fail online   //开始计费失败，允许用户上线  recording-scheme sch0   //command logging   recording-mode hwtacacs test  cmd recording-scheme sch0
认证domain	Aaa  domain huawei   authentication-scheme tac1   accounting-scheme tac1   authorization-scheme tac1     hwtacacs-server test
Assign an auhenti domain	domain huawei admin