4000 Router Series Security Configuration Guide

ManualsBrandsHP ManualsNetwork HardwareHP MSR3024 TAA-compliant AC Router

Specifying the HWTACACS authentication servers

You can specify one primary authentication server and up to 16 secondary authentication servers for an

HWTACACS scheme. When the primary server is not available, the device tries to communicate with the

secondary servers in the order they are configured, and communicates with the first secondary server in

active state. If redundancy is not required, specify only the primary server. An HWTACACS server can

function as the primary authentication server in one scheme and as the secondary authentication server

in another scheme at the same time.

To specify HWTACACS authentication servers for an HWTACACS scheme:

Ste

Command

Remarks

1. Enter system view.

system-view N/A

2. Enter HWTACACS

scheme view.

hwtacacs scheme hwtacacs-scheme-name

N/A

3. Specify HWTACACS

authentication servers.

• Specify the primary HWTACACS

authentication server:

primary authentication { ipv4-address

| ipv6 ipv6-address } [ port-number |

key { cipher | simple } string |

vpn-instance vpn-instance-name ] *

• Specify a secondary HWTACACS

authentication server:

secondary authentication

{ ipv4-address | ipv6 ipv6-address }

[ port-number | key { cipher | simple }

string | vpn-instance

vpn-instance-name ] *

Configure at least one command.

By default, no authentication

server is specified.

Two HWTACACS authentication

servers in a scheme, primary or

secondary, cannot have the same

combination of IP address, port

number, and VPN.

Specifying the HWTACACS authorization servers

You can specify one primary authorization server and up to 16 secondary authorization servers for an

HWTACACS scheme. When the primary server is not available, the device tries to communicate with the

secondary servers in the order they are configured, and communicates with the first secondary server in

active state. If redundancy is not required, specify only the primary server. An HWTACACS server can

function as the primary authorization server of one scheme and as the secondary authorization server of

another scheme at the same time.

To specify HWTACACS authorization servers for an HWTACACS scheme:

Ste