Hwtacacs Scheme - HPE FlexNetwork HSR6800 Security Command Reference

Views
System view
Default command level
2: System level
Parameters
ip-address: IP address in dotted decimal notation. It must be an address of the device and cannot be
0.0.0.0, 255.255.255.255, a class D address, or a class E address.
vpn-instance vpn-instance-name: Specifies the MPLS L3VPN to which the source IP address
belongs. The vpn-instance-name argument is a case-sensitive string of 1 to 31 characters. With a
VPN specified, the command specifies a private-network source IP address. With no VPN specified,
the command specifies a public-network source IP address.
Usage guidelines
The source IP address of HWTACACS packets that a NAS sends must match the IP address of the
NAS that is configured on the HWTACACS server. An HWTACACS server identifies a NAS by IP
address. Upon receiving an HWTACACS packet, an HWTACACS server checks whether the source
IP address of the packet is the IP address of any managed NAS. If it is, the server processes the
packet. If it is not, the server drops the packet.
You can specify up to one public-network source IP address and 15 private-network source IP
addresses. A newly specified public-network source IP address overwrites the previous one. Each
VPN can have only one private-network source IP address specified. A private-network source IP
address newly specified for a VPN overwrites the previous one.
The setting configured by the nas-ip command in HWTACACS scheme view is only for the
HWTACACS scheme, whereas that configured by the hwtacacs nas-ip command in system view is
for all HWTACACS schemes. The setting in HWTACACS scheme view takes precedence.
Examples
# Set the IP address for the device to use as the source address of the HWTACACS packets to
129.10.10.1.
<Sysname> system-view
[Sysname] hwtacacs nas-ip 129.10.10.1
Related commands
nas-ip

hwtacacs scheme

Use hwtacacs scheme to create an HWTACACS scheme and enter HWTACACS scheme view.
Use undo hwtacacs scheme to delete an HWTACACS scheme.
Syntax
hwtacacs scheme hwtacacs-scheme-name
undo hwtacacs scheme hwtacacs-scheme-name
Default
No HWTACACS scheme exists.
Views
System view
Default command level
3: Manage level
90