Command Manual – AAA RADIUS HWTACACS
H3C S7500E Series Ethernet Switches
Chapter 1 AAA/RADIUS/HWTACACS
Configuration Commands
1-68
Description
Use the
primary authentication
command to specify the primary HWTACACS
authentication server.
Use the
undo primary authentication
command to remove the configuration.
Note that:
z
The IP addresses of the primary and secondary authentication servers cannot be
the same. Otherwise, the configuration fails.
z
The HWTACACS service port configured on the device and that of the
HWTACACS server must be consistent.
z
If you configure the command for more than one time, the last configuration takes
effect.
z
You can remove an authentication server only when no active TCP connection for
sending authentication packets is using it.
Related commands:
display hwtacacs
.
Examples
# Set the primary authentication server.
<Sysname> system-view
[Sysname] hwtacacs scheme hwt1
[Sysname-hwtacacs-hwt1] primary authentication 10.163.155.13 49
1.3.10 primary authorization
Syntax
primary authorization ip-address
[
port-number
]
undo primary authorization
View
HWTACACS scheme view
Parameters
ip-address
: IP address of the server, a valid unicast address in dotted decimal notation.
The default is 0.0.0.0.
port-number
: Port number of the server. It ranges from 1 to 65535 and defaults to 49.
Description
Use the
primary authorization
command to specify the primary HWTACACS
authorization server.
Use the
undo primary authorization
command to remove the configuration.
