H3C S7500 Series Ethernet Switches Command Manual

Table Of Contents
Command Manual – AAA & RADIUS & HWTACACS & EAD
H3C S7500 Series Ethernet Switches
Chapter 1 AAA & RADIUS & HWTACACS
Configuration Commands
1-57
Description
Use the hwtacacs nas-ip command to specify the source address of the hwtacacs
packet sent from NAS.
Use the undo hwtacacs nas-ip command to restore the default setting.
Note that:
z By specifying the source address of the hwtacacs packet, you can avoid
destination unreachable packets returned from the server upon interface failure.
The source address is normally recommended to be a loopback interface address.
z When you configure the source address for the NAS to send HWTACACS packets,
the priority of HWTACACS scheme view is higher than that of system view.
z By default, the source address is not specified, that is, the address of the interface
sending the packet serves as the source address.
z This command specifies only one source address; therefore, the newly configured
source address will overwrite the original one.
Examples
# Configure the switch to send hwtacacs packets from 129.10.10.1.
<H3C> system-view
System View: return to User View with Ctrl+Z.
[H3C] hwtacacs nas-ip 129.10.10.1
1.3.5 hwtacacs scheme
Syntax
hwtacacs scheme hwtacacs-scheme-name
undo hwtacacs scheme hwtacacs-scheme-name
View
System view
Parameters
hwtacacs-scheme-name: Specifies an HWTACACS scheme name, with a character
string of 1 to 32 characters.
Description
Use the hwtacacs scheme command to enter HWTACACS scheme view and create
the specified HWTACACS scheme if it does not exist.
Use the undo hwtacacs scheme command to delete an HWTACACS scheme.