•
HWTACACS authentication must work with HWTACACS authorization. If only HWTACACS
authentication is configured, but HWTACACS authorization is not, users cannot log in.
•
You can remove an HWTACACS server only when the device and the server do not have active
TCP connections for sending authentication, authorization, or accounting packets.
•
HWTACACS does not support accounting for FTP users.
•
Determine the realtime accounting interval based on the number of users, as shown in
113.
Table 113 Recommended realtime accounting intervals
Number of users
1 to 99
100 to 499
500 to 999
1000 or more
Realtime accounting interval (in minutes)
3
6
12
15 or longer
320
Table