H3C S3610-28P Operation Manual page 953

Operation Manual – AAA-RADIUS-HWTACACS
H3C S3610&S5510 Series Ethernet Switches
Set the shared keys for
HWTACACS
authentication,
authorization, and
accounting packets
1.5.6 Configuring Attributes Related to the Data Sent to the TACACS Server
Follow these steps to configure the attributes related to the data sent to the
HWTACACS server:
Enter system view
Create a HWTACACS
scheme and enter
HWTACACS scheme view
Specify the format of the
username to be sent to a
HWTACACS server
Specify the unit for data
flows or packets to be sent
to a HWTACACS server
Set the
source IP
address of
the device
to send
HWTACAC
S packets
To do...
key { accounting |
authentication |
authorization } string
To do...
system-view
hwtacacs scheme
hwtacacs-scheme-name
user-name-format
{ with-domain |
without-domain }
data-flow-format { data
{ byte | giga-byte |
kilo-byte | mega-byte } |
packet { giga-packet |
kilo-packet |
mega-packet |
one-packet } }*
In
HWTACAC
nas-ip ip-address
S scheme
view
quit
In system
hwtacacs nas-ip
view
ip-address
Chapter 1 AAA/RADIUS/HWTACACS
Use the command...
Use the command...
1-37
Configuration
Remarks
Required
No shared key exists by
default.
Remarks
—
Required
Not defined by default
Optional
By default, the ISP
domain name is included
in the username.
Optional
The defaults are as
follows:
byte for data flows, and
one-packet for data
packets.
Use either command
By default, the outbound
port serves as the source
IP address to send
HWTACACS packets