H3C H3C S3600 Series, Руководство по управлению, Страница: 583 / 1277

1-66
z
You are not allowed to set the same IP address for both primary and secondary authentication
servers. If you do this, your setting will fail.
z
If you re-execute the command, the new setting overwrites the old one.
z
You can remove an authentication server setting only when there is no active TCP connection that
is sending authentication messages to the server.
Related commands:
display hwtacacs
.
Examples
# Set the IP address and UDP port number of the secondary authentication server for HWTACACS
scheme hwt1 to 10.163.155.13 and 49 respectively.
<Sysname> system-view
System View: return to User View with Ctrl+Z.
[Sysname] hwtacacs scheme hwt1
[Sysname-hwtacacs-hwt1] secondary authentication 10.163.155.13 49
secondary authorization
Syntax
secondary authorization ip-address
[
port
]
undo secondary authorization
View
HWTACACS scheme view
Parameters
ip-address
: IP address of the secondary authorization server, a valid unicast address in dotted decimal
notation.
port
: Port number of the secondary authorization server, ranging from 1 to 65535.
Description
Use the
secondary authorization
command to set the IP address and port number of the secondary
HWTACACS authorization server to be used by the current scheme.
Use the .
undo secondary authorization
command to restore the default IP address and port number
of the secondary HWTACACS authorization server, which are 0.0.0.0 and 49 respectively.
Note that:
z
You are not allowed to set the same IP address for both primary and secondary authorization
servers.
z
If you re-execute the command, the new setting will overwrite the old one.
z
You can remove an authorization server setting only when there is no active TCP connection that is
sending authorization messages to the server.
Related commands:
display hwtacacs
.
Examples
# Set the IP address and UDP port number of the secondary authorization server for HWTACACS
scheme hwt1 to 10.163.155.13 and 49 respectively.