76
Use the
undo hwtacacs scheme
command to delete an HWTACACS scheme.
By default, no HWTACACS scheme exists.
You cannot delete an HWTACACS scheme with online users.
Examples
# Create an HWTACACS scheme named
hwt1
and enter HWTACACS scheme view.
<Sysname> system-view
[Sysname] hwtacacs scheme hwt1
[Sysname-hwtacacs-hwt1]
key (HWTACACS scheme view)
Syntax
key
{
accounting
|
authentication
|
authorization
} [
cipher
|
simple
]
key
undo key
{
accounting
|
authentication
|
authorization
}
View
HWTACACS scheme view
Default level
2: System level
Parameters
accounting
: Sets the shared key for HWTACACS accounting packets.
authentication
: Sets the shared key for HWTACACS authentication packets.
authorization
: Sets the shared key for HWTACACS authorization packets.
cipher
: Sets a ciphertext shared key.
simple
: Sets a plaintext shared key.
key
: Specifies the shared key string. This argument is case sensitive. In non-FIPS mode, a ciphertext key
is a string of 1 to 117 characters, and a plaintext key is a string of 1 to 64 characters. In FIPS mode, a
ciphertext key is a string of 8 to 117 characters, and a plaintext key is a string of 8 to 64 characters that
must include uppercase letters, lowercase letters, numbers, and special characters. If neither
cipher
nor
simple
is specified, you set a plaintext shared key string.
Description
Use the
key
command to set the shared key for HWTACACS authentication, authorization, or accounting
packets.
Use the
undo key
command to remove the configuration.
By default, no shared key is configured.
For security purposes, all shared keys, including shared keys configured in plain text, are saved in
ciphertext.
Related commands:
display hwtacacs
.
Examples
# Set the plaintext shared key for HWTACACS accounting packets to
hello
for HWTACACS scheme
hwt1
.
