Table of Contents
Advertisement
3Com Router 3000 Ethernet Family
Configuration Guide
2.4.6 Setting a Key for Securing the Communication with TACACS Server
When using a TACACS server as an AAA server, you can set a key to improve the
communication security between the router and the TACACS server.
Perform the following configuration in HWTACACS view.
Table 2-39 Set a key for securing the communication with the TACACS server
Configure
communication with the TACACS accounting,
authorization or authentication server.
Delete the configuration.
No key is configured by default.
2.4.7 Setting the Username Format Acceptable to the TACACS Server
Username is usually in the "userid@isp-name" format, with the domain name following
"@".
If a TACACS server does not accept the username with domain name, you can remove
the domain name and resend it to the TACACS server.
Perform the following configuration in HWTACACS view.
Table 2-40 Set the username format acceptable to the TACACS server
Send username with domain name.
Send username without domain name.
By default, each username sent to a TACACS server contains a domain name.
2.4.8 Setting the Unit of Data Flows Destined for the TACACS Server
Perform the following configuration in HWTACACS view.
Table 2-41 Set the unit of data flows destined for the TACACS server
Operation
Set the unit of data flows
destined for the TACACS
server.
Operation
a
key
for
securing
Operation
data-flow-format data [ byte | giga-byte | kilo-byte |
mega-byte ]
data-flow-format packet [ giga-packet | kilo-packet |
mega-packet | one-packet ]
3Com Corporation
2-34
Chapter 2 AAA and RADIUS/HWTACACS Protocol
the
key { accounting | authorization
| authentication } string
undo
key
authorization | authentication }
Command
user-name-format with-domain
user-name-format without-domain
Command
Configuration
Command
{
accounting
|
Advertisement
Chapters
Table of Contents
Troubleshooting
