Configuring Hwtacacs Schemes - HPE FlexFabric 7900 Series Security Configuration Manual

•
Excessive authentication failures notification—The number of authentication failures to the
total number of authentication attempts exceeds the specified threshold.
You can configure SNMP parameters to control the output of these SNMP notifications. For more
information, see Network Management and Monitoring Configuration Guide.
To enable SNMP notifications for RADIUS:
Step
1. Enter system view.
2. Enable SNMP notifications
for RADIUS.
Displaying and maintaining RADIUS
Execute display commands in any view and reset commands in user view.
Task
Display the RADIUS scheme
configuration.
Display RADIUS packet statistics.
Clear RADIUS statistics.

Configuring HWTACACS schemes

Configuration task list
Tasks at a glance
(Required.)
(Required.)
(Optional.)
(Optional.)
(Required.)
(Optional.)
(Optional.)
(Optional.)
(Optional.)
(Optional.)
Creating an HWTACACS scheme
Create an HWTACACS scheme before performing any other HWTACACS configurations. You can
configure a maximum of 16 HWTACACS schemes. An HWTACACS scheme can be used by multiple
ISP domains.
To create an HWTACACS scheme:
Creating an HWTACACS scheme
Specifying the HWTACACS authentication servers
Specifying the HWTACACS authorization servers
Specifying the HWTACACS accounting servers
Specifying the shared keys for secure HWTACACS communication
Specifying a VPN for the scheme
Setting the username format and traffic statistics units
Specifying the source IP address for outgoing HWTACACS packets
Setting HWTACACS timers
Displaying and maintaining HWTACACS
Command
system-view
snmp-agent trap enable radius
[ accounting-server-down |
authentication-error-threshold |
authentication-server-down |
accounting-server-up |
authentication-server-up ] *
Command
display radius scheme [ radius-scheme-name ]
display radius statistics
reset radius statistics
27
Remarks
N/A
By default, all types of SNMP
notifications are enabled for
RADIUS.