Command Manual – AAA&RADIUS&HWTACACS
H3C S3610&S5510 Series Ethernet Switches
Chapter 1 AAA & RADIUS & HWTACACS
Configuration Commands
1-70
Note that:
z
You are not allowed to assign the same IP address to both primary and secondary
authentication servers; otherwise, unsuccessful operation is prompted.
z
If you repeatedly use this command, the latest configuration overwrites the
previous one.
z
You can remove an authentication server only when it is not being used by any
active TCP connections, and the removal impacts only packets forwarded
afterwards.
Related command:
display hwtacacs
.
Example
# Configure a primary authentication server.
<Sysname> system-view
System View: return to User View with Ctrl+Z.
[Sysname] hwtacacs scheme hwt1
[Sysname-hwtacacs-hwt1] primary authentication 10.163.155.13 49
1.3.10 primary authorization
Syntax
primary authorization ip-address
[
port-number
]
undo primary authorization
View
HWTACACS scheme view
Parameter
ip-address
: IP address of the server, a valid unicast address in dotted decimal format.
By default, the IP address of the primary authentication server is 0.0.0.0.
port-number
: Port number of the server, which is in the range 1 to 65535 and defaults to
49.
Description
Use the
primary authorization
command to configure a primary HWTACACS
authorization server.
Use the
undo primary authorization
command to delete the configured primary
authorization server.
Note that:
z
You are not allowed to assign the same IP address to both primary and secondary
authorization servers; otherwise, unsuccessful operation is prompted.
