H3C S7500E Series Ethernet Switches Operation Manual

Operation Manual – AAA RADIUS HWTACACS
H3C S7500E Series Ethernet Switches
Chapter 1 AAA/RADIUS/HWTACACS
Configuration
1-34
 Note:
z It is recommended to specify only the primary HWTACACS authorization server if
backup is not required.
z The IP addresses of the primary and secondary authorization servers cannot be the
same. Otherwise, the configuration fails.
z You can remove an authorization server only when no active TCP connection for
sending authorization packets is using it.
1.5.4 Specifying the HWTACACS Accounting Servers
Follow these steps to specify the HWTACACS accounting servers and perform related
configurations:
To do… Use the command… Remarks
Enter system view
system-view
—
Create a HWTACACS
scheme and enter
HWTACACS scheme
view
hwtacacs scheme
hwtacacs-scheme-name
Required
Not defined by default
Specify the primary
HWTACACS accounting
server
primary accounting
ip-address [ port-number ]
Specify the secondary
HWTACACS accounting
server
secondary accounting
ip-address [ port-number ]
Required
Use either approach
By default, neither the
primary nor the secondary
accounting server is
specified.
Enable the device to
buffer stop-accounting
requests getting no
responses
stop-accounting-buffer
enable
Optional
Enabled by default
Set the maximum number
of stop-accounting
request transmission
attempts
retry stop-accounting
retry-times
Optional
100 by default