H3C S5120-EI Series, Руководство по эксплуатации

Страница: 546 / 1191

1-32
Specifying the HWTACACS Authorization Servers
Follow these steps to specify the HWTACACS authorization servers:
To do… Use the command… Remarks
Enter system view
system-view
—
Create a HWTACACS scheme
and enter HWTACACS scheme
view
hwtacacs scheme
hwtacacs-scheme-name
Required
Not defined by default
Specify the primary
HWTACACS authorization
server
primary authorization
ip-address
[
port-number
]
Specify the secondary
HWTACACS authorization
server
secondary authorization
ip-address
[
port-number
]
Required
Configure at least one of the
commands
No authorization server by default
z
It is recommended to specify only the primary HWTACACS authorization server if backup is not
required.
z
If both the primary and secondary authorization servers are specified, the secondary one is used
when the primary one is not reachable.
z
The IP addresses of the primary and secondary authorization servers cannot be the same.
Otherwise, the configuration fails.
z
You can remove an authorization server only when no active TCP connection for sending
authorization packets is using it.
Specifying the HWTACACS Accounting Servers
Follow these steps to specify the HWTACACS accounting servers and perform related configurations:
To do… Use the command… Remarks
Enter system view
system-view
—
Create a HWTACACS scheme
and enter HWTACACS scheme
view
hwtacacs scheme
hwtacacs-scheme-name
Required
Not defined by default
Specify the primary
HWTACACS accounting server
primary accounting
ip-address
[
port-number
]
Specify the secondary
HWTACACS accounting server
secondary accounting
ip-address
[
port-number
]
Required
Configure at least one of the
commands
No accounting server by default
Enable the device to buffer
stop-accounting requests
getting no responses
stop-accounting-buffer
enable
Optional
Enabled by default
Set the maximum number of
stop-accounting request
transmission attempts
retry stop-accounting
retry-times
Optional
100 by default