# AAA - Authentication Authorization Accounting

# URL

frinx-openconfig-aaa:aaa

# OPENCONFIG YANG

YANG models

{
    "frinx-openconfig-aaa:aaa": {
        "authentication": {
            "users": {
                "user": [
                    {
                        "username": "",
                        "config": {
                            "password-hashed": "",
                            "frinx-huawei-aaa-extension:service-type": [
                                ""
                            ],
                            "frinx-huawei-aaa-extension:privilege-level": "",
                            "frinx-ciena-aaa-extension:access-level": ""
                        }
                    }
                ]
            }
        },
        "frinx-huawei-aaa-extension:domain-list": {
            "domain": [
                {
                    "name": "",
                    "config": {
                        "radius-server": "",
                        "accounting-scheme": "",
                        "authentication-scheme": ""
                    }
                }
            ]
        },
        "frinx-huawei-aaa-extension:radius": {
            "template": [
                {
                    "name": "",
                    "config": {
                        "retransmit-attempts": "",
                        "secret-key-hashed": "",
                        "authentication-data": [
                            {
                                "source-address": "",
                                "vrf-name": ""
                            }
                        ]
                    }
                }
            ]
        },
        "frinx-huawei-aaa-extension:authentication-schemes": {
            "authentication": [
                {
                    "name": "",
                    "config": {
                        "authentication": {
                            "config": {
                                "authentication-method": [
                                    ""
                                ]
                            }
                        }
                    }
                }
            ]
        },
        "frinx-huawei-aaa-extension:accounting-schemes": {
            "account": [
                {
                    "name": "",
                    "config": {
                        "fail-policy": "",
                        "fail-policy-mode": "",
                        "accounting": {
                            "config": {
                                "accounting-method": [
                                    ""
                                ]
                            }
                        }
                    }
                }
            ]
        }
    }
}

# OS Configuration Commands

# Huawei NE5000E (V800R009C10SPC310)

# CLI

 
aaa                                        
 authentication-scheme              
  authentication-mode  

 accounting-scheme 
  accounting-mode                   
  accounting    

 domain                            
  authentication-scheme         
  accounting-scheme          
  radius-server                   
 
 local-user lab password irreversible-cipher 
 local-user lab privilege level        
 local-user lab service-type 

radius 
 radius-server template 
 radius-server shared-key cipher 
 radius-server authentication  1812 vpn-instance  source LoopBack 0 weight 80
 radius-server authentication  1812 source LoopBack 0 weight 80
 radius-server retransmit

local, radius is conversions of set to "authentication-method"
local, radius is conversions of set to "accounting-method"
start-fail is conversion of set to "fail-policy"
online is conversion of set to "fail-policy-mode" telnet, terminal, ssh, ftp is conversions of set to "frinx-huawei-aaa-extension:service-type"
1-15 is conversion of set to "frinx-huawei-aaa-extension:privilege-level"

# Unit

Link to GitHub : huawei-unit

# SAOS 6

# CLI

 
aaa
 user create user  access-level  secret

limited, admin, super, diag is conversion of set to "frinx-ciena-aaa-extension:access-level"

# Unit

Link to GitHub : saos6-unit