R21xx-HP FlexFabric 11900 Security Command Reference

53
Field Descri
p
tion
Secondary Author Server Secondary HWTACACS authorization server.
Secondary Acct Server Secondary HWTACACS accounting server.
IP
IP address of the HWTACACS server. If no server is configured, this
field displays Not configured.
Port
Service port of the HWTACACS server. If no port configuration is
performed, this field displays the default port number.
State Status of the HWTACACS server: active or blocked.
VPN Instance
MPLS L3VPN to which the HWTACACS server or scheme belongs. If
no VPN is specified for the server or scheme, this field displays Not
configured.
NAS IP Address Source IP address for outgoing HWTACACS packets.
Server Quiet Period Quiet period for the primary servers, in minutes.
Realtime Accounting Interval(minutes) Real-time accounting interval, in minutes.
Response Timeout Interval HWTACACS server response timeout period, in seconds.
Username Format
Format for the usernames sent to the HWTACACS server. Possible
values include:
• With-domain—Includes the domain name.
• Without-domain—Excludes the domain name.
• Keep-original—Forwards the username as it is entered.
Related commands
reset hwtacacs statistics
hwtacacs nas-ip
Use hwtacacs nas-ip to specify a source IP address for outgoing HWTACACS packets.
Use undo hwtacacs nas-ip to delete a source IP address for outgoing HWTACACS packets.
Syntax
hwtacacs nas-ip { ipv4-address | ipv6 ipv6-address } [ vpn-instance vpn-instance-name ]
undo hwtacacs nas-ip { ipv4-address | ipv6 ipv6-address } [ vpn-instance vpn-instance-name ]
Default
The source IP address of a packet sent to the server is the IP address of the outbound interface.
Views
System view
Predefined user roles
network-admin
Parameters
ipv4-address: Specifies an IPv4 address, which must be an address of the device and cannot be 0.0.0.0,
255.255.255.255, a class D address, a class E address, or a loopback address.