3Com Switch 7754, Configuration Manual

Page: 535 / 940

HWTACACS Configuration 535
Configuring the
Attributes for Data to be
Sent to TACACS Servers
c
CAUTION: Generally, the access users are named in the userid@isp-name format.
Where, isp-name behind the @ character represents the ISP domain name. If the
TACACS server does not accept the user name carrying isp domain name, it is
necessary to remove the domain name from the user names before they are sent
to the TACACS server.
Configuring the Timers
of TACACS Servers
c
CAUTION:
■
The setting of real-time accounting interval is indispensable to real-time
accounting. After an interval value is set, the device transmits the accounting
Table 423 Configure the attributes for data to be sent to TACACS servers
Operation Command Description
Enter system view system-view -
Create a
HWTACACS
scheme and enter
its view hwtacacs scheme
hwtacacs-scheme-name
Required
By default, no HWTACACS scheme
exists.
Set the format of
the user names to
be sent to
TACACS servers user-name-format { with-domain
| without-domain }
Optional
By default, the user names sent
from the switch to TACACS servers
carry ISP domain names.
Set the units of
measure for data
flows sent to
TACACS servers data-flow-format data { byte |
giga-byte | kilo-byte |
mega-byte }
Optional
By default, in a TACACS scheme,
the unit of measure for data is byte
and that for packets is one-packet.
data-flow-format
packet
{ giga-packet | kilo-packet
| mega-packet | one-packet }
Set the source IP
address used by
the switch to send
HWTACACS
packets HWTACACS view
nas-ip ip-address
Optional
By default, no source IP address is
specified; the IP address of the
outbound interface is used as the
source IP address.
System view
hwtacacs nas-ip ip-address
Table 424 Configure the timers of TACACS servers
Operation Command Description
Enter system view system-view -
Create a
HWTACACS
scheme and enter
its view hwtacacs scheme
hwtacacs-scheme-name
Required
By default, no HWTACACS scheme
exists.
Set the response
timeout time of
TACACS servers timer response-timeout
seconds
Optional
By default, the response timeout time
is five seconds.
Set the wait time for
the primary server
to restore the active
state timer quiet minutes Optional
By default, the primary server waits
five minutes before restoring the
active state.
Set the real-time
accounting interval timer realtime-accounting
minutes
Optional
By default, the real-time accounting
interval is 12 minutes.