Configuring Tacacs Authentication Servers; Configuring Tacacs Authorization Servers - 3Com 3C13636 Configuration Manual

3Com Router 3000 Ethernet Family
Configuration Guide
Delete
scheme.
If the HWTACACS scheme you specify does not exist, the system creates it and enters
HWTACACS view.
In HWTACACS view you can configure the HWTACACS scheme.
The system supports up to 128 HWTACACS schemes. You can only delete the
schemes that are not being used.
By default, no HWTACACS scheme exists.

2.4.2 Configuring TACACS Authentication Servers

Perform the following configuration in HWTACACS view.
Table 2-34 Configure TACACS authentication servers
Configure the TACACS primary
authentication server.
Delete the TACACS primary
authentication server.
Configure
secondary authentication server.
Delete the TACACS secondary
authentication server.
The primary and secondary authentication servers cannot use the same IP address.
Otherwise, the system will prompt unsuccessful configuration. The default port number
is 49.
If you execute this command repeatedly, the new settings will replace the old settings.
You can remove a server that cannot be removed otherwise, only when it is not used by
any active TCP connection for sending authentication packets. This delete does not
affect the packets sent before the operation.

2.4.3 Configuring TACACS Authorization Servers

Perform the following configuration in HWTACACS view.
Operation
a HWTACACS
undo hwtacacs scheme hwtacacs-scheme-name
Operation
the TACACS
3Com Corporation
Chapter 2 AAA and RADIUS/HWTACACS Protocol
Command
Command
primary authentication ip-address [ port ]
undo primary authentication
secondary authentication ip-address [ port ]
undo secondary authentication
2-31
Configuration