3Com S7902E, Руководство по настройке

Страница: 1858 / 2621

1-39
To do… Use the command… Remarks
Specify the unit for data flows or
packets to be sent to an
HWTACACS server
data-flow-format { data
{ byte | giga-byte | kilo-byte
| mega-byte } | packet
{ giga-packet | kilo-packet |
mega-packet |
one-packet } } *
Optional
The defaults are as follows:
byte for data flows, and
one-packet for data packets.
z
If an HWTACACS server does not support a username with the domain name, you can configure
the device to remove the domain name before sending the username to the server.
z
For level switching authentication, the user-name-format keep-original and user-name-format
without-domain commands produce the same results, that is, usernames sent to the
HWTACACS server carry no ISP domain name.
Specifying the Source IP Address for HWTACACS Packets to be Sent
After you specify the source IP address for HWTACACS packets to be sent, if the physical port for
sending the HWTACACS packets fails, response packets from the server will be able to arrive at the
NAS.
Follow these steps to specify the source IP address for HWTACACS packets to be sent:
To do… Use the command… Remarks
Enter system view
system-view
—
hwtacacs nas-ip ip-address
Specify the source IP
address for
HWTACACS packets to
be sent
hwtacacs scheme
hwtacacs-scheme-name
nas-ip ip-address
Required
Use either command.
By default, there is no source IP
address specified for HWTACACS
packets and the IP address of the
interface for sending the HWTACACS
packets will be used as the source IP
address of the HWTACACS packets.
The nas-ip command in HWTACACS scheme view is effective only for the current HWTACACS
scheme, while that by the hwtacacs nas-ip command in system view is for all HWTACACS schemes.
However, the setting in HWTACACS scheme view takes precedence over that in system view.
Setting Timers Regarding HWTACACS Servers
Follow these steps to set timers regarding HWTACACS servers: