Primary Authentication (Hwtacacs Scheme View) - HP A5500 EI Command Reference Manual

Default level
2: System level
Parameters
ip-address: IP address of the primary HWTACACS accounting server, a valid unicast address in dotted
decimal notation. The default is 0.0.0.0.
port-number: Port number of the primary HWTACACS accounting server. It ranges from 1 to 65535 and
defaults to 49.
vpn-instance vpn-instance-name: Specifies the MPLS L3VPN that the primary HWTACACS accounting
server belongs to, where vpn-instance-name is a case-sensitive string of 1 to 31 characters. If the server is
on the public network, do not specify this keyword and argument combination.
Description
Use the primary accounting command to specify the primary HWTACACS accounting server.
Use the undo primary accounting command to remove the configuration.
By default, no primary HWTACACS accounting server is specified.
The IP addresses of the primary and secondary accounting servers cannot be the same. Otherwise, the
configuration fails.
The HWTACACS service port configured on the device and that of the HWTACACS server must be
consistent.
If the server to be specified resides on an MPLS VPN, you also need to specify that VPN by using the
vpn-instance vpn-instance-name keyword and argument combination to ensure normal communication
with the server. The VPN specified here takes precedence over the VPN specified for the RADIUS scheme.
If you configure the command repeatedly, only the last configuration takes effect.
You can remove an accounting server only when it is not used by any active TCP connection to send
accounting packets.
Related commands: display hwtacacs, hwtacacs scheme, and vpn-instance (HWTACACS scheme view).
Examples
# Specify the IP address and port number of the primary accounting server for HWTACACS scheme test1
as 10.163.155.12 and 49.
<Sysname> system-view
[Sysname] hwtacacs scheme test1
[Sysname-hwtacacs-test1] primary accounting 10.163.155.12 49

primary authentication (HWTACACS scheme view)

Syntax
primary authentication ip-address [ port-number | vpn-instance vpn-instance-name ] *
undo primary authentication
View
HWTACACS scheme view
Default level
2: System level
79