数据网设备账号集中认证和精确授权的方法  

Based on tacacs+protocol implementation data network equipment accounts centralized authentication and authorization method

作　　者：董磊[1] 李秀峰[1] 张广原 李晓冰[1] 

机构地区：[1]中国电信股份有限公司山东分公司,山东250101

出　　处：《网络安全技术与应用》2014年第10期35-38,共4页Network Security Technology & Application

摘　　要：随着中国电信维护集约化工作的开展,网络资产的管理职责发生了较大改变,为适应新的维护工作需求,同时加强网络设备的安全管理,山东电信对一次性口令认证系统进行了深化应用。本文将描述以实现全省网络设备"集中账号认证、精确命令授权"为目标的技术方案和利用tacacs+协议实现命令授权的技术难点。with the development of the China telecom maintenance intensive work, the network assets management responsibility of the larger changes, in order to adapt to the new maintenance requirements, at the same time to strengthen the safety management of network equipment, shandong telecom has carried on the deepening to one-time password authentication system applications.This article will describe in order to achieve the province＇s network equipment centralized account authentication, precise cormnand authorization ＂as the goal of technology scheme and use tacacs ＋ protocol implementation command authorization of technical difficulties.

关 键 词：TACACS 认证授权 AAA 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]