HP VPN Firewall Appliances Access Control Command Reference

233
port-number: Specifies the service port number of the secondary HWTACACS authorization server. The
value range for the port number is 1 to 65535, and the default setting is 49.
vpn-instance vpn-instance-name: Specifies the VPN to which the secondary HWTACACS authorization
server belongs. The vpn-instance-name argument is a case-sensitive string of 1 to 31 characters. If the
server is on the public network, do not specify this option.
Usage guidelines
The IP addresses of the primary and secondary authorization servers cannot be the same. Otherwise, the
configuration fails.
If the specified server resides on a VPN, you also must specify that VPN with the secondary authorization
command to ensure normal communication with the server. The VPN specified here takes precedence
over the VPN specified for the HWTACACS scheme.
If you execute the command multiple times, the most recent configuration takes effect.
You can remove an authorization server only when it is not used by any active TCP connection to send
authorization packets. Removing an authorization server only affects authorization processes that occur
after the remove operation.
Examples
# Configure the secondary authorization server 10.163.155.13 with TCP port number 49.
<Sysname> system-view
[Sysname] hwtacacs scheme hwt1
[Sysname-hwtacacs-hwt1] secondary authorization 10.163.155.13 49
Related commands
• display hwtacacs
• vpn-instance (HWTACACS scheme view)
stop-accounting-buffer enable (HWTACACS scheme view)
Use stop-accounting-buffer enable to enable the device to buffer stop-accounting requests to which no
responses are received.
Use undo stop-accounting-buffer enable to disable the buffering function.
Syntax
stop-accounting-buffer enable
undo stop-accounting-buffer enable
Default
The device buffers stop-accounting requests to which no responses are received.
Views
HWTACACS scheme view
Default command level
2: System level
Usage guidelines
Stop-accounting requests affect the charge to users. A NAS must make its best effort to send every
stop-accounting request to the HWTACACS accounting servers. For each stop-accounting request that