网络工程 - TACACS 与瞻博网络设备 - 吾爱随笔录

任何人都可以帮助配置 TACACS+ 服务器以及瞻博网络设备中的配置吗？

Ubuntu 服务器 14.04
瞻博网络 QFX5100 交换机

以下是我的配置：

对于 TACACS+ 服务器：

#Encryption key
key = "test"

#Accounting Records

default authentication = file /etc/passwd

accounting syslog;

accounting file = var/log/tac_plus/tac_plus.acct

group = SU {
   default service = permit
   service = junos-exec {
     local-user-name = SU
   }
 }

user = admin_user {
 member =  SU
 login = file /etc/passwd
 }

对于瞻博网络设备：

set system authentication-order tacplus
set system authentication-order password
set system root-authentication encrypted-password "$1$reAOW7RO$wRFyLe1K.3FZFq7XWVw1"
set system tacplus-server 172.16.x.x secret "$9$.mz6pu1hyKBI"
set system tacplus-server 172.16.x.x source-address 172.16.x.x
set system accounting events login
set system accounting events change-log
set system accounting events interactive-commands
set system accounting destination tacplus server 172.16.1.229 secret "$9$Pf390SlMIE"
set system login class admin idle-timeout 30
set system login class admin permissions all
set system login user SU full-name local-user-name
set system login user SU uid 2002
set system login user SU class admin

请帮助我，因为我在过去的 3 个月里被困住了。我不知道我犯了哪些错误。我能够获取日志，但我无法对用户进行身份验证，这对我来说非常重要。