Primary Authorization - Huawei Quidway S3900 series Command Manual

Command Manual – AAA & RADIUS & HWTACACS & EAD
Quidway S3900 Series Ethernet Switches-Release 1510
Note that:
You are not allowed to assign the same IP address to both primary and
secondary authentication servers; otherwise, unsuccessful operation is
prompted.
If you repeatedly use this command, the latest configuration overwrites the
previous one.
You can remove an authentication server only when it is not being used by any
active TCP connections, and the removal impacts only packets forwarded
afterwards.
Related command: display hwtacacs.
Example
# Configure a primary authentication server.
<Quidway> system-view
System View: return to User View with Ctrl+Z.
[Quidway] hwtacacs scheme hwt1
[Quidway-hwtacacs-hwt1] primary authentication 10.163.155.13 49

1.3.10 primary authorization

Syntax
primary authorization ip-address [ port ]
undo primary authorization
View
HWTACACS scheme view
Parameter
ip-address: IP address of the server, a valid unicast address in dotted decimal format.
By default, the IP address of the primary authentication server is 0.0.0.0.
port: Port number of the server, which is in the range 1 to 65535 and defaults to 49.
Description
Use the primary authorization command to configure a primary HWTACACS
authorization server.
Use the undo primary authorization command to delete the configured primary
authorization server.
Note that:
You are not allowed to assign the same IP address to both primary and
secondary authorization servers; otherwise, unsuccessful operation is prompted.
Huawei Technologies Proprietary
1-69
Chapter 1 AAA & RADIUS & HWTACACS
Configuration Commands