Configuring Hwtacacs Authorization Servers; Configuring Hwtacacs Accounting Servers And The Related Attributes - H3C S9500 Series Operation Manual

Operation Manual – AAA RADIUS HWTACACS
H3C S9500 Series Routing Switches
A TACACS scheme authentication server can be deleted only when no Active TCP
connection used to send authentication packets is using the server.

1.4.3 Configuring HWTACACS Authorization Servers

Perform the following operations in HWTACACS view to configure HWTACACS
authorization servers:
Configure the primary HWTACACS
authorization server
Delete the primary HWTACACS
authorization server
Configure the secondary HWTACACS
authorization server
Delete the secondary HWTACACS
authorization server
Note:
If only authentication and accounting servers are configured and no authorization
server is configured, both authentication and accounting can be performed normally for
the FTP, Telnet, and SSH users, but the priority of these users is 0 (that is, the lowest
privilege level) by default,
The primary and secondary authorization servers cannot use the same IP address. The
default port number is 49.
If you execute this command repeatedly, the new settings will replace the old settings.
1.4.4 Configuring HWTACACS Accounting Servers and the Related
Attributes
I. Configuring HWTACACS accounting servers
Perform the following operations in HWTACACS view to configure HWTACACS
accounting servers:
Configure the primary TACACS accounting
server
Delete the primary TACACS accounting server
Configure the secondary TACACS accounting
server
To do...
To do...
1-30
Chapter 1 AAA, RADIUS and HWTACACS
Use the command...
primary authorization ip-address
[ port-number ]
undo primary authorization
secondary authorization ip-address
[ port-number ]
undo secondary authorization
Use the command...
primary accounting ip-address
[ port-number ]
undo primary accounting
secondary accounting
ip-address [ port-number ]
Protocol Configuration