Huawei Quidway S5600 Series Operation Manual page 565

Operation Manual – AAA & RADIUS & HWTACACS & EAD
Quidway S5600 Series Ethernet Switches-Release 1510
1.5.2 Configuring HWTACACS Authentication Servers
Table 1-25 Configure HWTACACS authentication servers
Operation
Enter system view
Create a HWTACACS
scheme and enter its
view
Set the IP address and
port number
primary
authentication server
Set the IP address and
port number
secondary
authentication server
Caution:
The primary and secondary authentication servers cannot use the same IP address.
Otherwise, the system will prompt unsuccessful configuration.
You can remove a server only when it is not used by any active TCP connection for
sending authentication packets.
1.5.3 Configuring HWTACACS Authorization Servers
Table 1-26 Configure TACACS authorization servers
Operation
Enter system view
Create a HWTACACS
scheme and enter its
view
Command
system-view
hwtacacs
hwtacacs-scheme-name
of the primary
TACACS ip-address [ port ]
of the secondary authentication
TACACS ip-address [ port ]
Command
system-view
hwtacacs
hwtacacs-scheme-name
Huawei Technologies Proprietary
1-35
Chapter 1 AAA & RADIUS & HWTACACS
—
Required
scheme
By
HWTACACS
exists.
Required
By
authentication
address of the primary
authentication server is
0.0.0.0, and the port
number is 0.
Required
By
address
secondary
authentication server is
0.0.0.0, and the port
number is 0.
—
Required
scheme
By
HWTACACS
exists.
Configuration
Description
default, no
scheme
default, the IP
default, the IP
of the
Description
default, no
scheme