#AAA - Authentication Authorization Accounting

#URL

frinx-openconfig-aaa:aaa

#OPENCONFIG YANG

YANG models

{ "frinx-openconfig-aaa:aaa": { "authentication": { "users": { "user": [ { "username": "", "config": { "password-hashed": "", "frinx-huawei-aaa-extension:service-type": [ "" ], "frinx-huawei-aaa-extension:privilege-level": "", "frinx-ciena-aaa-extension:access-level": "" } } ] } }, "frinx-huawei-aaa-extension:domain-list": { "domain": [ { "name": "", "config": { "radius-server": "", "accounting-scheme": "", "authentication-scheme": "" } } ] }, "frinx-huawei-aaa-extension:radius": { "template": [ { "name": "", "config": { "retransmit-attempts": "", "secret-key-hashed": "", "authentication-data": [ { "source-address": "", "vrf-name": "" } ] } } ] }, "frinx-huawei-aaa-extension:authentication-schemes": { "authentication": [ { "name": "", "config": { "authentication": { "config": { "authentication-method": [ "" ] } } } } ] }, "frinx-huawei-aaa-extension:accounting-schemes": { "account": [ { "name": "", "config": { "fail-policy": "", "fail-policy-mode": "", "accounting": { "config": { "accounting-method": [ "" ] } } } } ] } } }

#OS Configuration Commands

#Huawei NE5000E (V800R009C10SPC310)

#CLI

 
aaa                                        
 authentication-scheme              
  authentication-mode  

 accounting-scheme 
  accounting-mode                   
  accounting    

 domain                            
  authentication-scheme         
  accounting-scheme          
  radius-server                   
 
 local-user lab password irreversible-cipher 
 local-user lab privilege level        
 local-user lab service-type 

radius 
 radius-server template 
 radius-server shared-key cipher 
 radius-server authentication  1812 vpn-instance  source LoopBack 0 weight 80
 radius-server authentication  1812 source LoopBack 0 weight 80
 radius-server retransmit 

local, radius is conversions of set to "authentication-method"
local, radius is conversions of set to "accounting-method"
start-fail is conversion of set to "fail-policy"
online is conversion of set to "fail-policy-mode" telnet, terminal, ssh, ftp is conversions of set to "frinx-huawei-aaa-extension:service-type"
1-15 is conversion of set to "frinx-huawei-aaa-extension:privilege-level"

#Unit

Link to GitHub : huawei-unit

#SAOS 6

#CLI

 
aaa
 user create user  access-level  secret 

limited, admin, super, diag is conversion of set to "frinx-ciena-aaa-extension:access-level"

#Unit

Link to GitHub : saos6-unit