数据网设备账号集中认证和精确授权的方法

随着中国电信维护集约化工作的开展,网络资产的管理职责发生了较大改变,为适应新的维护工作需求,同时加强网络设备的安全管理,山东电信对一次性口令认证系统进行了深化应用.本文将描述以实现全省网络设备“集中账号认证、精确命令授权”为目标的技术方案和利用tacacs＋协议实现命令授权的技术难点.

Based on tacacs + protocol implementation data network equipment accounts centralized authentication and authorization method

with the development of the China telecom maintenance intensive work, the network assets management responsibility of the larger changes, in order to adapt to the new maintenance requirements, at the same time to strengthen the safety management of network equipment, shandong telecom has carried on the deepening to one-time password authentication system applications.This article will describe in order to achieve the province＇s network equipment centralized account authentication, precise cormnand authorization ＂as the goal of technology scheme and use tacacs ＋ protocol implementation command authorization of technical difficulties.