HP 5120 SI Series Security Configuration Manual page 45

To do...
Specify the secondary
HWTACACS authorization
server
NOTE:
If both the primary and secondary authorization servers are specified, the secondary one is used when
•
the primary one is not reachable.
If redundancy is not required, specify only the primary HWTACACS authorization server.
•
The IP addresses of the primary and secondary authorization servers cannot be the same. Otherwise,
•
the configuration fails.
You can remove an authorization server only when no active TCP connection for sending authorization
•
packets is using it.
Specifying the HWTACACS accounting servers
Follow these steps to specify the HWTACACS accounting servers and perform related configurations:
To do...
Enter system view
Enter HWTACACS scheme view
Specify the primary
HWTACACS accounting server
Specify the secondary
HWTACACS accounting server
Enable the device to buffer
stop-accounting requests getting
no responses
Set the maximum number of
stop-accounting request
transmission attempts
NOTE:
If both the primary and secondary accounting servers are specified, the secondary server is used when
•
the primary server is not reachable.
If redundancy is not required, specify only the primary HWTACACS accounting server.
•
• The IP addresses of the primary and secondary accounting servers cannot be the same. Otherwise, the
configuration will fail.
You can remove an accounting server only when no active TCP connection for sending accounting
•
packets is using it.
HWTACACS does not support keeping accounts on FTP users.
•
Use the command...
secondary authorization ip-address
[ port-number | key [ cipher | simple ]
key ] *
Use the command...
system-view
hwtacacs scheme
hwtacacs-scheme-name
primary accounting ip-address
[ port-number | key [ cipher |
simple ] key ] *
secondary accounting ip-address
[ port-number | key [ cipher |
simple ] key ] *
stop-accounting-buffer enable
retry stop-accounting retry-times
33
Remarks
No authorization server is
specified by default.
Remarks
—
—
Required
Configure at least one command.
No accounting server is specified by
default.
Optional
Enabled by default
Optional
100 by default