R0106-HP MSR Router Series Security Configuration Guide(V7)

Tasks at a

lance

(Optional.) Specifying the HWTACACS authorization servers

(Optional.) Specifying the HWTACACS accounting servers

(Required.) Specifying the shared keys for secure HWTACACS communication

(Optional.) Specifying a VPN for the scheme

(Optional.) Setting the username format and traffic statistics units

(Optional.) Specifying the source IP address for outgoing HWTACACS packets

(Optional.) Setting HWTACACS timers

(Optional.) Displaying and maintaining HWTACACS

Creating an HWTACACS scheme

Create an HWTACACS scheme before performing any other HWTACACS configurations. You can

configure up to 16 HWTACACS schemes. An HWTACACS scheme can be referenced by multiple ISP

domains.

To create an HWTACACS scheme:

Ste

Command

Remarks

1. Enter system view.

system-view N/A

2. Create an HWTACACS

scheme and enter

HWTACACS scheme view.

hwtacacs scheme

hwtacacs-scheme-name

By default, no HWTACACS

scheme is defined.

Specifying the HWTACACS authentication servers

You can specify one primary authentication server and up to 16 secondary authentication servers for an

HWTACACS scheme. When the primary server is not available, the device searches for the secondary

servers in the order they are configured. The first secondary server in active state is used for

communication.

If redundancy is not required, specify only the primary server. An HWTACACS server can function as the

primary authentication server in one scheme and as the secondary authentication server in another

scheme at the same time.

To specify HWTACACS authentication servers for an HWTACACS scheme:

Ste

Command

Remarks

1. Enter system view.

system-view N/A

2. Enter HWTACACS

scheme view.

hwtacacs scheme hwtacacs-scheme-name

N/A