H3C S7500E Series Ethernet Switches Operation Manual

Operation Manual – AAA RADIUS HWTACACS
H3C S7500E Series Ethernet Switches
Chapter 1 AAA/RADIUS/HWTACACS
Configuration
1-33
1.5.2 Specifying the HWTACACS Authentication Servers
Follow these steps to specify the HWTACACS authentication servers:
To do… Use the command… Remarks
Enter system view
system-view
—
Create a HWTACACS
scheme and enter
HWTACACS scheme
view
hwtacacs scheme
hwtacacs-scheme-name
Required
Not defined by default
Specify the primary
HWTACACS
authentication server
primary authentication
ip-address [ port-number ]
Specify the secondary
HWTACACS
authentication server
secondary
authentication
ip-address [ port-number ]
Required
Use either approach
By default, neither the
primary nor the secondary
authentication server is
specified.
 Note:
z It is recommended to specify only the primary HWTACACS authentication server if
backup is not required.
z The IP addresses of the primary and secondary authentication servers cannot be
the same. Otherwise, the configuration fails.
z You can remove an authentication server only when no active TCP connection for
sending authentication packets is using it.
1.5.3 Specifying the HWTACACS Authorization Servers
Follow these steps to specify the HWTACACS authorization servers:
To do… Use the command… Remarks
Enter system view
system-view
—
Create a HWTACACS
scheme and enter
HWTACACS scheme
view
hwtacacs scheme
hwtacacs-scheme-name
Required
Not defined by default
Specify the primary
HWTACACS
authorization server
primary authorization
ip-address [ port-number ]
Specify the secondary
HWTACACS
authorization server
secondary authorization
ip-address [ port-number ]
Required
Use either approach
By default, neither the
primary nor the secondary
authorization server is
specified.