Configuring Hwtacacs Schemes - HP 5920 Series Configuration Manual

Step
1. Enter system view.
2. Enter RADIUS scheme
view.
3. Enable accounting-on.
Configuring the IP addresses of the security policy servers
The NAS verifies the validity of received control packets and accepts only control packets from known
servers. To use a security policy server that is independent of the AAA servers, configure the IP address
of the security policy server on the NAS.
The security policy server is the management and control center of the HP EAD solution. To implement all
EAD functions, configure both the IP address of the security policy server and that of the IMC Platform on
the NAS.
To configure the IP address of a security policy server for a scheme:
Step
1. Enter system view.
2. Enter RADIUS scheme
view.
3. Specify a security policy
server.
Displaying and maintaining RADIUS
Execute display commands in any view and reset commands in user view.
Task
Display the RADIUS scheme
configuration.
Display RADIUS packet statistics.
Clear RADIUS statistics.

Configuring HWTACACS schemes

Configuration task list
Tasks at a glance
(Required.)
(Required.)
(Optional.)
Command
system-view
radius scheme
radius-scheme-name
accounting-on enable
[ interval seconds | send
send-times ] *
Command
system-view
radius scheme radius-scheme-name
security-policy-server { ipv4-address
| ipv6 ipv6-address } [ vpn-instance
vpn-instance-name ]
Creating an HWTACACS scheme
Specifying the HWTACACS authentication servers
Specifying the HWTACACS authorization servers
Command
display radius scheme [ radius-scheme-name ]
display radius statistics
reset radius statistics
29
Remarks
N/A
N/A
By default, the accounting-on feature is
disabled.
Remarks
N/A
N/A
By default, no security policy server
is specified for a scheme.
You can specify up to eight security
policy servers for a RADIUS scheme.