H3C S7500 Series Ethernet Switches Operation Manual

Operation Manual – AAA & RADIUS & HWTACACS & EAD
H3C S7500 Series Ethernet Switches
Chapter 1 AAA & RADIUS & HWTACACS
Configuration
1-34
To do... Use the command... Remarks
Set the IP address and
port number of the
primary TACACS
authentication server
primary authentication
ip-address [ port ]
Required
By default, the IP address
of the primary
authentication server is
0.0.0.0, and the port
number is 0.
Set the IP address and
port number of the
secondary TACACS
authentication server
secondary
authentication
ip-address [ port ]
Required
By default, the IP address
of the secondary
authentication server is
0.0.0.0, and the port
number is 0.
Caution:
z The primary and secondary authentication servers cannot use the same IP address.
Otherwise, the system will prompt unsuccessful configuration.
z You can remove a server only when it is not being used by any active TCP
connection for sending authentication packets.
1.5.3 Configuring HWTACACS Authorization Servers
Table 1-25 Configure TACACS authorization servers
To do... Use the command... Remarks
Enter system view
system-view
—
Create a HWTACACS
scheme and enter its view
hwtacacs scheme
hwtacacs-scheme-nam
e
Required
By default, no HWTACACS
scheme exists.
Set the IP address and
port number of the
primary TACACS
authorization server
primary authorization
ip-address [ port ]
Required
By default, the IP address of
the primary authorization
server is 0.0.0.0, and the
port number is 0.
Set the IP address and
port number of the
secondary TACACS
authorization server
secondary
authorization
ip-address [ port ]
Required
By default, the IP address of
the secondary authorization
server is 0.0.0.0, and the
port number is 0.