R3166-R3206-HP High-End Firewalls Access Control Configuration Guide-6PW101

153
Task Remarks
Specifying the HWTACACS accounting servers and the relevant
parameters
Optional
Specifying the shared keys for authenticating HWTACACS packets Required
Setting the username format and traffic statistics units Optional
Specifying a source IP address for outgoing HWTACACS packets Optional
Setting timers for controlling communication with HWTACACS
servers
Optional
Displaying and maintaining HWTACACS Optional
Creating an HWTACACS scheme
The HWTACACS protocol is configured on a per scheme basis. Before performing other HWTACACS
configurations, follow these steps to create an HWTACACS scheme and enter HWTACACS scheme
view:
To do… Use the command…
Remarks
Enter system view system-view —
Create an HWTACACS scheme
and enter HWTACACS scheme
view
hwtacacs scheme
hwtacacs-scheme-name
Required
Not defined by default
NOTE:
• Up to 16 HWTACACS schemes can be configured.
• A scheme can be deleted only when it is not referenced.
Specifying the HWTACACS authentication servers
You can specify one primary authentication server and up to one secondary authentication server for an
HWTACACS scheme so that the NAS can find a server for user authentication when using the scheme.
When the primary server is not available, the secondary server is used, if any. In a scenario where
redundancy is not required, specify only the primary server.
Follow these steps to specify HWTACACS authentication servers for an HWTACACS scheme:
To do… Use the command…
Remarks
Enter system view system-view —
Enter HWTACACS scheme
view
hwtacacs scheme hwtacacs-scheme-name —
Specify the primary
HWTACACS authentication
server
primary authentication ip-address
[ port-number ]
Required
Configure at least one
command.
No authentication server is
specified by default.
Specify the secondary
HWTACACS authentication
server
secondary authentication ip-address
[ port-number ]