H3C S5120-EI Series, Руководство по эксплуатации

Страница: 545 / 1191

1-31
Creating a HWTACACS scheme
The HWTACACS protocol is configured on a per scheme basis. Before performing other HWTACACS
configurations, follow these steps to create a HWTACACS scheme and enter HWTACACS scheme
view:
To do… Use the command… Remarks
Enter system view
system-view
—
Create a HWTACACS scheme
and enter HWTACACS scheme
view
hwtacacs scheme
hwtacacs-scheme-name
Required
Not defined by default
z
Up to 16 HWTACACS schemes can be configured.
z
A scheme can be deleted only when it is not referenced.
Specifying the HWTACACS Authentication Servers
Follow these steps to specify the HWTACACS authentication servers:
To do… Use the command… Remarks
Enter system view
system-view
—
Create a HWTACACS scheme
and enter HWTACACS scheme
view
hwtacacs scheme
hwtacacs-scheme-name
Required
Not defined by default
Specify the primary
HWTACACS authentication
server
primary authentication
ip-address
[
port-number
]
Specify the secondary
HWTACACS authentication
server
secondary authentication
ip-address
[
port-number
]
Required
Configure at least one of the
commands
No authentication server by default
z
It is recommended to specify only the primary HWTACACS authentication server if backup is not
required.
z
If both the primary and secondary authentication servers are specified, the secondary one is used
when the primary one is not reachable.
z
The IP addresses of the primary and secondary authentication servers cannot be the same.
Otherwise, the configuration fails.
z
You can remove an authentication server only when no active TCP connection for sending
authentication packets is using it.