Huawei Quidway S8500 Series, Руководство по управлению

Страница: 944 / 1341

Command Manual – Security
Quidway S8500 Series Routing Switches Chapter 2 AAA and RADIUS/HWTACACS Protocol
Configuration Commands
Huawei Technologies Proprietary
2-58
2.3.11 primary authorization
Syntax
primary authorization ip-address
[
port-number
]
undo primary authorization
View
HWTACACS view
Parameter
ip-address
: IP address of the server, a valid unicast address in dotted decimal format.
port-number
: Port number of the server, which is in the range 1 to 65535 and defaults to
49.
Description
Use the
primary authorization
command to configure a primary TACACS
authorization server.
Use the
undo primary authorization
command to delete the configured primary
authorization server.
By default, the IP address of the TACACS authorization server is all zeros.
You are not allowed to assign the same IP address to both primary and secondary
authorization servers.
If you repeatedly use this command, the latest configuration overwrites the previous
one.
You can remove a TACACS scheme authorization server only when no Active TCP
connection used to send authorization packets is now using the server, and the removal
impacts only packets forwarded afterwards.
Related command:
display hwtacacs
.
Example
# Configure a primary authorization server.
[Quidway] hwtacacs scheme test1
[Quidway-hwtacacs-test1] primary authorization 10.163.155.13 49
2.3.12 reset hwtacacs statistics
Syntax
reset hwtacacs statistics
{
accounting
|
authentication
|
authorization
|
all
}