Command Reference Guide

3Com Router 3000 Ethernet Family
Command Reference Guide
Chapter 1 AAA and RADIUS/HWTACACS Protocol
Configuration Commands
3Com Corporation
1-63
You can remove an accounting server only when it is not being used by any active TCP
connections.
Example
# Configure a secondary accounting server.
[3Com] hwtacacs scheme test1
[3Com-hwtacacs-test1] secondary accounting 10.163.155.12 49
1.3.17 secondary authentication
Syntax
secondary authentication ip-address [ port ]
undo secondary authentication
View
HWTACACS view
Parameter
ip-address: IP address of the server, a valid unicast address in dotted decimal format.
port: Port number of the server, which is in the range 1 to 65535 and defaults to 49.
Description
Use the secondary authentication command to configure a secondary TACACS
authentication server.
Use the undo secondary authentication command to delete the configured
secondary authentication server.
By default, IP address of TACACS authentication server is all zeros.
You are not allowed to assign the same IP address to both primary and secondary
authentication servers.
You can configure only one primary authentication server in a HWTACACS scheme. If
you repeatedly use this command, the latest configuration replaces the previous one.
You can remove an authentication server only when it is not being used by any active
TCP connections, and the removal impacts only packets forwarded afterwards.
Related command: display hwtacacs.
Example
# Configure a secondary authentication server.
[3Com] hwtacacs scheme test1
[3Com-hwtacacs-test1] secondary authentication 10.163.155.13 49