3Com MSR 50 Series, Руководство по настройке

Страница: 1778 / 2443

1778 C
HAPTER
93: AAA/RADIUS/HWTACACS C
ONFIGURATION
n
■
The IP addresses of the primary and secondary authorization servers cannot be
the same. Otherwise, the configuration fails.
■
You can remove an authorization server only when no active TCP connection
for sending authorization packets is using it.
Specifying the
HWTACACS Accounting
Servers
Follow these steps to specify the HWTACACS accounting servers and perform
related configurations:
n
■
The IP addresses of the primary and secondary accounting servers cannot be
the same. Otherwise, the configuration fails.
■
You can remove an accounting server only when no active TCP connection for
sending accounting packets is using it.
■
Currently, HWTACACS does not support keeping accounts on FTP users.
Create a HWTACACS scheme
and enter HWTACACS
scheme view hwtacacs scheme
hwtacacs-scheme-name
Required
By default, no HWTACACS
scheme is created.
Configure the IP address and
port of the primary
HWTACACS authorization
server primary authorization
ip-address [ port-number ]
Required
The defaults are as follows:
0.0.0.0 for the IP address, and
49 for the TCP port.
Configure the IP address and
port of the secondary
HWTACACS authorization
server secondary authorization
ip-address [ port-number ]
Required
The defaults are as follows:
0.0.0.0 for the IP address, and
49 for the TCP port.
To do... Use the command... Remarks
To do... Use the command... Remarks
Enter system view system-view -
Create a HWTACACS scheme
and enter HWTACACS
scheme view hwtacacs scheme
hwtacacs-scheme-name
Required
By default, no HWTACACS
scheme is created.
Configure the IP address and
port of the primary
HWTACACS accounting
server primary accounting
ip-address [ port-number ]
Required
The defaults are as follows:
0.0.0.0 for the IP address, and
49 for the TCP port.
Configure the IP address and
port of the secondary
HWTACACS accounting
server secondary accounting
ip-address [ port-number ]
Required
The defaults are as follows:
0.0.0.0 for the IP address, and
49 for the TCP port.
Enable the device to buffer
stop-accounting requests
getting no responses stop-accounting-buffer
enable Optional
Enabled by default
Set the maximum number of
stop-accounting request
transmission attempts retry stop-accounting
retry-times
Optional
100 by default